[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3ucehnvkzkfik":3,"$f131lttmeg31d7":59},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"publishedAt":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":16,"affectedCount":16,"affectedCountStatus":17,"affectedCountLowerBound":18,"affectedCountUnit":19,"hasEnglishDescription":4,"contentLocale":20,"availableLocales":21,"translations":31,"severity":42,"dataClasses":43,"description":50,"seoTitle":51,"seoDescription":52,"logoUrl":53,"isVerified":4,"isSensitive":54,"isSpamList":54,"isMalware":54,"company":55},"6a452308a20f867c8ba8e760","marcus-millichap","Marcus & Millichap 2026年数据泄露事件","marcusmillichap.com","2026-04-12T00:00:00.000Z","2026-05-03T22:53:12.000Z","2026-10-09T20:08:18.423Z","Third party breach","",[],1837078,"known",null,"unknown","zh",[22,23,20,24,25,26,27,28,29,30],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":32,"tr":33,"zh":34,"hi":35,"es":36,"ar":37,"fr":38,"bn":39,"pt":40,"ru":41},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},"Critical",[44,45,46,47,48,49],"Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses","\u003Cp>Marcus & Millichap 数据泄露事件发生于2026年4月，是一次高风险的企业通信信息泄露。这家商业地产经纪公司的相关数据暴露，导致约1,837,078个不同的电子邮箱地址受到影响。该记录包含雇主、职务、全名、电话号码和实体地址等字段，因此在针对企业人员的定向社会工程攻击方面具有重大风险。攻击者可能利用房地产和投资业务背景，编造虚假文件、报价、合同或要求更改付款去向的消息。\u003C\u002Fp> \u003Ch2>泄露的数据类型及风险\u003C\u002Fh2> \u003Cp>该记录中已核实的数据字段包括电子邮箱地址、雇主信息、职务、全名、电话号码和实体地址。密码、银行账户、投资金额、身份证明文件或合同内容不属于已核实的数据类别，因此未列入本次披露。不过，企业职务和联系信息可能让定向消息更具可信度，尤其是针对经纪人、投资者、高管、财务和运营人员的消息。\u003C\u002Fp> \u003Ch2>商业地产经纪业务中的风险\u003C\u002Fh2> \u003Cp>受影响用户首先需要防范的是虚假房地产报价、投资文件、合同更新或付款指示消息。攻击者可能利用真实的职务、公司名称和电话号码来获取信任。即使消息中的文件链接或附件看起来与合法交易有关，也不应在未经官方渠道核实的情况下打开。对于付款或变更银行账户的请求，不应仅凭电子邮件批准就认定其有效，还应通过另一渠道进行核实。\u003C\u002Fp> \u003Ch2>雇主、职务和地址信息带来的风险\u003C\u002Fh2> \u003Cp>电话号码和实体地址信息还会增加通过冒充来电和邮寄信件实施诈骗的风险。对于自称客户代表、经纪人、法律顾问或付款负责人的人员提出的紧急文件、验证码或付款请求，用户应保持警惕。房地产交易可能涉及大额资金，即使一条简短的虚假指令也可能造成严重经济损失。在未通过已知电话号码和现有合同渠道确认前，不应进行交易。\u003C\u002Fp> \u003Ch2>已核实的范围与局限\u003C\u002Fh2> \u003Cp>由于该记录不含密码，不应将其视为支持账户被接管这一说法的核心依据；不过，其他泄露数据中可能包含与同一邮箱地址对应的密码。用户应为工作邮箱、客户门户和文件共享工具设置各不相同的密码，并启用双重身份验证。如果企业域名下的邮箱地址受到影响，应检查登录失败记录、异常会话和文件共享权限。\u003C\u002Fp> \u003Ch2>机构应吸取的安全教训\u003C\u002Fh2> \u003Cp>对于房地产和投资公司而言，Marcus & Millichap 这条记录说明了联系信息如何被用于财务类社会工程攻击。应向员工讲解虚假合同、虚假付款指示和虚假文件共享等场景，并向客户明确说明官方沟通渠道。应定期审查数据访问权限、客户名单、导出流程和第三方集成。\u003C\u002Fp> \u003Ch2>必要的防范措施\u003C\u002Fh2> \u003Cp>Marcus & Millichap 数据泄露汇集了职务、雇主、电话号码、地址和邮箱字段，因此在商业地产领域构成高风险的社会工程攻击隐患。受影响用户需要通过官方渠道核实文件、合同、报价和付款请求。最恰当的评估方式是将此事件视为与企业职务和房地产交易相关的定向诈骗风险，而不是密码泄露事件。\u003C\u002Fp> \u003Cp>在商业地产业务中，Marcus & Millichap 这条记录会加大虚假交易消息可能造成的财务影响。攻击者可能谎称持有投资组合、报价、租赁或出售项目、尽职调查文件或付款指示。真实的公司名称、职务和电话号码可能使这些消息显得可信。对于文件共享、转账或变更银行账户等请求，用户应仅通过已知的沟通渠道处理，并实行双人核验。\u003C\u002Fp> \u003Cp>这条记录并未声称合同内容、银行信息或密码发生泄露。已核实的字段仅限于企业通信和职务信息。不过，由于商业交易金额较高，该事件的风险被评估为高。组织应培训员工防范虚假文件和更改付款去向的骗局，并在客户沟通中规范官方文件共享系统和审批流程。\u003C\u002Fp>","Marcus & Millichap 2026年数据泄露事件 (1.8 百万 已报告记录数)","Marcus & Millichap 2026年数据泄露事件. 据报告，涉及1.8 百万条记录。 已报告的数据：电子邮箱地址, 雇主, 职位名称。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fmarcusmillichap_com.webp",false,{"name":56,"sector":57,"country":58,"website":9,"websiteArchiveUrl":14,"websiteStatus":14,"websiteCheckedAt":18},"Marcus & Millichap","Real Estate","United States",{"success":4,"breaches":60},[61,68,75,82],{"slug":62,"title":63,"companyName":64,"logoUrl":65,"breachDate":66,"affectedCount":67,"affectedCountStatus":17},"cushman-wakefield","Cushman & Wakefield 2026年数据泄露事件","Cushman & Wakefield","\u002Fuploads\u002Flogo\u002Fcushmanwakefield_com.webp","2026-05-05T00:00:00.000Z",310431,{"slug":69,"title":70,"companyName":71,"logoUrl":72,"breachDate":73,"affectedCount":18,"affectedCountStatus":74},"sunrise-company-2026","Sunrise Company 数据泄露事件","Sunrise Company","\u002Fuploads\u002Flogo\u002Fsunrise-company.png","2026-04-23T00:00:00.000Z","not_disclosed",{"slug":76,"title":77,"companyName":78,"logoUrl":79,"breachDate":80,"affectedCount":81,"affectedCountStatus":17},"jrk-property-holdings-2026","JRK Property Holdings 数据泄露事件","JRK Property Holdings, Inc.","\u002Fuploads\u002Flogo\u002Fjrk_com.png","2026-03-26T00:00:00.000Z",113641,{"slug":83,"title":84,"companyName":85,"logoUrl":86,"breachDate":87,"affectedCount":88,"affectedCountStatus":17},"berkadia","Berkadia 2026年数据泄露事件","Berkadia","\u002Fuploads\u002Flogo\u002Fberkadia_com.webp","2026-03-19T00:00:00.000Z",256618]