Houzz Data Breach

What happened?

In mid-2018, the housing design website Houzz suffered a data breach . The company learned of the incident later that year then disclosed it to impacted members in February 2019. Almost 49 million unique email addresses were in the breach alongside names, IP addresses, geographic locations and either salted hashes of passwords or links to social media profiles used to authenticate to the service. The data was provided to HIBP by dehashed.com .

When did it happen?

The breach date in the public record is May 23, 2018. The record was added to the catalogue on March 12, 2019 and last updated there on March 12, 2019.

What information was reported as exposed?

• Email addresses
• Geographic locations
• IP addresses
• Names
• Passwords
• Social media profiles
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Houzz or used houzz.com around May 23, 2018. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.