Havenly data breach: 1.4M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2020-08-01
In June 2020, the interior design website Havenly suffered a data breach which impacted almost 1.4 million members of the service. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as SHA-1 hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by dehashed.com. Exposed data: email addresses, geographic locations, names, passwords, phone numbers. The breach dates from Jun 25, 2020; Have I Been Pwned loaded it on Aug 1, 2020.
What to do
- If you had a Havenly account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch