JLL Data Breach Lawsuit Investigation
On November 17, 2025, Jones Lang LaSalle Americas, Inc. (JLL) filed notice of a cybersecurity incident stemming from a vulnerability in Salesloft’s “Drift” product. If you received a JLL data breach letter, you may be entitled to free identity protection and potential compensation. Use the information below to understand what happened and explore your legal options.
Download Official Breach Notice (PDF)Key Takeaways
- Notice date: November 17, 2025
- Cause: Third-party vulnerability in Salesloft “Drift” connected to JLL’s Salesforce platform
- Affected individuals: 1 Massachusetts resident (as reported to the MA Attorney General)
- Data involved: Name, contact information, Social Security number, and date of birth (data elements varied per person)
- Credit monitoring: Two years of complimentary Experian identity protection
What Happened?
In August 2025, Salesloft announced a cybersecurity issue impacting its Drift product. JLL uses Drift with its Salesforce customer management platform. An internal investigation confirmed that an unauthorized party accessed certain JLL data stored in Salesforce via the Drift vulnerability. JLL disabled Drift, revoked unauthorized access, and continues to monitor systems. The company states it has no indication that the data has been misused.
What Information Was Exposed?
The breach may have involved one or more of the following data elements:
- Name
- Email address
- Postal address
- Phone number
- Social Security number
- Date of birth
Steps JLL Reported Taking
- Launched an investigation with third-party cybersecurity experts
- Disabled Salesloft Drift within Salesforce
- Revoked unauthorized access credentials
- Implemented ongoing monitoring for suspicious activity
Protecting Yourself After the JLL Data Breach
JLL advises affected individuals to:
- Enroll in the complimentary Experian credit monitoring and identity protection services described in the mailed notice
- Review account statements for unfamiliar charges
- Obtain free annual credit reports from AnnualCreditReport.com or 1-877-322-8228
- Consider placing a fraud alert or security freeze with the credit bureaus
Company Overview
JLL is a global real-estate services firm providing commercial property and investment management services.
- Website: us.jll.com
- Headquarters: 200 E Randolph St., Suite 4300, Chicago, IL, USA
- Founded: 1999
- Industry: Real Estate & Property Management
- Employees: 112,100
- Parent company: Jones Lang LaSalle Incorporated
- Stock symbol: JLL (NYSE)
- Wikipedia: JLL
Frequently Asked Questions
How many people were affected by the JLL data breach?
JLL reported the incident to the Massachusetts Attorney General as impacting 1 resident.
I received a data breach letter from JLL — what should I do?
Follow the activation instructions for the complimentary Experian credit monitoring, review your account statements, and obtain your free credit reports to check for suspicious activity.
What information did the JLL breach expose?
The incident may have exposed your name, contact details, Social Security number, and date of birth. Not every element applied to each person.
Did JLL offer credit monitoring, and for how long?
Yes. JLL is providing two years of free credit monitoring and identity protection services through Experian.
How can I file a claim related to the JLL data breach?
Potential legal claims are under investigation. Retain your breach letter and proof of any out-of-pocket losses, then consult a data-privacy attorney to discuss eligibility.
How can I get the official breach notice (PDF) for JLL?
You can download the notice directly from the Massachusetts Attorney General’s website using the button above.