Skip to content
Tishman Speyer Data Breach Exposes Investor Social Security Numbers

Tishman Speyer Data Breach Exposes Investor Social Security Numbers

First seen 23 Sep 2026, 09:58 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster September 23, 2026 at 09:58 UTC
  • Data breach exposed Social Security numbers of Tishman Speyer investors.
  • Breach occurred via third-party EY, not Tishman Speyer's systems.
  • EY is offering 24 months of credit monitoring to affected individuals.

Tishman Speyer disclosed a data breach affecting personal information of some investors, which occurred through Ernst & Young LLP (EY), a third-party service provider. The breach was identified on April 23, 2026, and involved unauthorized access to EY's platform, where documents containing sensitive data were downloaded between March 28 and April 12, 2026. Affected information includes Social Security numbers, but not bank account numbers or income details. Tishman Speyer notified the Massachusetts Office of Consumer Affairs and Business Regulation, reporting 24 residents affected. EY is providing 24 months of complimentary credit monitoring services to those impacted. The investigation is ongoing, and Federman & Sherwood is looking into Tishman Speyer's cybersecurity measures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Timeline

2026-04-23
Suspicious activity detected at EY
Ernst & Young LLP confirmed suspicious activity that led to the data breach investigation.
Claimdepot
2026-08-06
Tishman Speyer notified of potential data impact
EY informed Tishman Speyer that investor information may have been compromised.
Claimdepot
2026-08-25
Review process completed
EY completed its review to identify affected individuals and their data.
Claimdepot
2026-09-21
Investigation announced by Federman & Sherwood
Federman & Sherwood began investigating the breach following the notification to Massachusetts authorities.
Federmanlaw
2026-09-22
Breach disclosed to the public
Tishman Speyer publicly disclosed the breach and its implications for affected investors.
Claimdepot

More articles in this cluster (2)

Following this threat?

Track Cyberscout in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed