Vendor credential exposure breach wave hits North american firms. A week of cascading vendor breaches and employee credential exposures shows why domain monitoring and third-party risk reviews are now core business survival tools. LeakTrace Intelligence Team Published September 12, 2026 · LeakTrace Intelligence Team The past seven days delivered a clear message to small and mid-size businesses across North America: your exposure is rarely just your own. A wave of incidents disclosed between September 4 and September 11 traced back not to sophisticated exploits, but to single stolen credentials, misconfigured cloud storage, and forgotten vendor tokens - each one cascading into dozens or hundreds of downstream organizations. For business owners, the lesson is less about any one breach and more about the pattern: identity is now the perimeter, and vendors are the weakest link in it. The vendor cascade: one stale credential, 200 companies affected. The clearest illustration of supply-chain risk this year continues to widen its blast radius. A four-year-old, unrotated Salesforce credential at a company called Klue gave threat actors a foothold that spread into the Salesforce and Gong environments of nearly 200 companies, several of them cybersecurity vendors themselves. Datadog Security Labs has traced the extortion crew, which calls itself Icarus, to activity dating back to at least April 28, 2026, before it began harvesting Salesforce and Gong OAuth tokens through a dormant credential on June 11, 2026, opening a path into the Salesforce environments of close to 200 companies. LastPass, BeyondTrust, Jamf, HackerOne, Recorded Future, Snyk, Tanium and Huntress all confirmed they lost business data in the incident. The takeaway for SMBs: your vendor's forgotten API token is now your breach notification obligation. Expect renewal questionnaires to ask more directly about credential age and OAuth grant review cadence, not just whether a vendor risk program exists. A single employee credential brought down a state database. On the individual-employee side, Florida's motor vehicle agency confirmed a breach that started with exactly one person's login. FLHSMV learned of a data breach conducted by an international cybercriminal organization after a criminal actor was able to take advantage of a single Plant City Police Department user's credentials that were improperly housed on the employee's personal electronic device. A criminal-targeting extortion group known as ShinyHunters has claimed responsibility, and Mathspace, an online math learning platform, separately disclosed that attackers stole data from more than 1 million students, staff, and parents after breaching its internal reporting system. Both incidents underline the same operational failure businesses keep repeating: credentials stored outside approved, monitored systems remain the single most common entry point for identity-based intrusions. Breach databases are growing faster than detection can keep up. The scale of exposed credentials sitting in breach databases continues to outpace enterprise defenses. None of the increased spending on infostealer detection stopped a 24-billion-record database from sitting exposed for days. Commercial real estate services firm Berkadia also joined the list of confirmed victims this week, with a data breach involving Berkadia, a commercial real estate services company, with 10 million records leaked, posted by ShinyHunters on BreachForums. For any business handling client financial or property records, this is a direct reminder that breach notification laws apply regardless of company size, and regulators are increasingly unforgiving of delayed disclosure. What Individuals should do this week. * Check your work and personal email addresses against breach databases and rotate any password reused across more than one account. * Enable multi-factor authentication on all financial, email, and cloud storage accounts - session-token theft is now bypassing passwords entirely in active phishing kits. * Avoid storing work credentials on personal devices, exactly the failure point that triggered the FLHSMV breach. What businesses should do this week. * Audit vendor OAuth tokens and API keys for age - a credential left unrotated for years was the entry point for the 200-company Klue cascade. * Require breach notification clauses and credential-rotation cadence commitments in every vendor contract renewal. * Monitor your company domain against breach databases and criminal-targeting sources continuously, not just after a public disclosure - by the time a breach makes headlines, employee credentials may have circulated for weeks. * Review where employee and customer data lives across third-party SaaS tools; as this week showed, your compliance exposure often runs through a vendor's misconfigured system, not your own. Action for Individuals Check whether your email address appears in a breach database this week, and remove any work credentials stored on personal devices or unmanaged apps. Action for Businesses Audit every vendor's OAuth tokens and API credentials for age this week - an unrotated, years-old credential is exactly what cascaded into a 200-company breach this year.

Gatsby Florida closes on $118.6M construction financing through Berkadia for trophy office asset in Palm Beach Gardens. August 31, 2026 "The Palm, Palm Beach Gardens" reflects growing demand for premier office space as financial services firms expand northward from West Palm Beach. Berkadia, a distinguished leader in the commercial real estate sector, announces that it has arranged a $118.6 million loan on behalf of Gatsby Florida for the construction of The Palm, Palm Beach Gardens, the only new construction, Class A office and retail property located north of West Palm Beach in Palm Beach Gardens, Florida. Upon completion in 2028, the eight-story, approximately 200,000-square-foot development will deliver premier office and retail space to the PGA corridor in northern Palm Beach County, where there are no other new office projects in the pipeline. Construction is scheduled to begin August 2026. Gatsby Florida selected the Berkadia team led by Senior Managing Director Charles Foschini, Managing Director Scott Wadler and Associate Director Shannon Wilson, who secured the three-year, floating-rate, interest-only construction loan through Cirrus Real Estate Partners. Gatsby Florida is a best-in-class owner, operator and developer focused on Class A assets in Class A locations. The Palm, Palm Beach Gardens will be the second and newest trophy asset in Gatsby Florida's portfolio, joining the fully leased and recently refinanced DiVosta Towers. Both offer much-needed quality office space to the PGA corridor, one of Florida's strongest and fastest-evolving office markets. "Palm Beach Gardens is an exceptional live-work-play market which has attracted best-in-class tenants, and The Palm, Palm Beach Gardens will add to that resumé as the only new Class A property in the PGA corridor," said Darryl Kaplan of Darryl R. Kaplan Company, who oversees leasing at Gatsby Florida. "It will provide an elegant working environment that does not exist today in the area." "The Palm represents the continued evolution of Palm Beach Gardens as a premier corporate destination," said Foschini. "As financial services firms, family offices and other sophisticated businesses continue expanding into Palm Beach County, demand is extending beyond downtown West Palm Beach into nearby submarkets that offer an exceptional quality of life while remaining highly connected. New institutional-quality office development remains extremely limited, and Gatsby Florida's proven success with DiVosta Towers gave lenders confidence in both the sponsorship and the long-term fundamentals supporting this project." "While many office markets across the country continue to face headwinds, Florida remains a notable exception," added Wadler. "Lenders are highly disciplined today, but they continue to pursue well-conceived office projects in markets supported by strong population growth, corporate relocations and limited new supply. Palm Beach County exemplifies those fundamentals, and Gatsby Florida's proven execution gave lenders the confidence to finance one of the region's next generation of trophy office developments." "Palm Beach Gardens continues to be one of the strongest office markets in South Florida," added Jon Blunk, president TCRE, which is handling leasing for The Palm, Palm Beach Gardens. "The PGA Boulevard corridor has a deep executive base, strong demographics and an established roster of high-quality companies, with limited new Class A office supply. The Palm will build on the strength of that market and deliver a new level of office product along the PGA corridor." Located at 11200 RCA Center Drive, The Palm, Palm Beach Gardens will feature over 200,000 square feet of Class A office space with efficient 25,000-square-foot floor plates, 10-foot floor-to-ceiling glass, state-of-the-art building systems, hurricane-impact glazing and full-building generator backup to provide operational resilience for today's corporate users. The development will also include approximately 30,000 square feet of ground-floor retail and restaurant space, an 838-space structured parking garage with EV charging stations, a rooftop terrace, conference facilities, a fitness center and prominent monument and building signage opportunities. The Palm is the centerpiece of PGA Station, a mixed-use neighborhood that includes 1,200 newly developed apartments, and which will contain the future Tri-Rail and Brightline stop for Palm Beach Gardens. "We strive to provide the best office environment for today's users," said Babak Ebrahimzadeh, President of Gatsby Florida. "From design to quality and finishes, our goal is for The Palm, Palm Beach Gardens to become known throughout South Florida as a premier office building. We've already seen strong leasing momentum from some of the country's top firms, and we expect that to continue as we deliver the building over the next 24 months." "This development represents the next frontier in Gatsby Florida's evolution, which began with the development of 800 Brickell," said Isaac Shalom, Vice President of Gatsby Florida. "The Palm, Palm Beach Gardens sets a new standard for office buildings in South Florida. By developing a high-quality asset in this strategic location, with convenient access to I-95 and Alternate A1A, we're giving users an accessible workplace without sacrificing quality. We've had great success with leasing thus far, and we're looking forward to welcoming more tenants to the building." Prominently positioned along PGA Boulevard with immediate access to Interstate 95, The Palm, Palm Beach Gardens is strategically located within the rapidly expanding northern Palm Beach County business corridor. As office demand continues to spread north from West Palm Beach, the location offers companies access to an executive-oriented lifestyle that combines premier residential communities, championship golf, luxury hospitality and abundant retail amenities. Tenants will be within minutes of more than 2.5 million square feet of surrounding retail, including The Gardens Mall and Downtown at the Gardens, a 130,000-square-foot Life Time fitness facility directly across the street, PGA National Resort & Spa and Palm Beach International Airport. About Berkadia(R): Berkadia, a joint venture of Berkshire Hathaway and Jefferies Financial Group, is a leader in the commercial real estate industry, offering a robust suite of services to our multifamily and commercial property clients. Through our integrated mortgage banking, investment sales and servicing platform, Berkadia delivers comprehensive real estate solutions for the entire life cycle of our clients' assets. About Gatsby Florida: Gatsby Florida was created by Nader Shalom and Babak Ebrahimzadeh in 2019. The partnership has been a leader in the Class A mixed use sector in South Florida since its inception with iconic projects such as 800 Brickell and DiVosta Towers. Gatsby is looking for new opportunities in commercial real estate in South Florida- Retail, office, mixed use, residential and land. Please contact [email protected] and [email protected] for new opportunities.