Houzz, the home design and renovation platform, suffered a data breach in mid-2018 that exposed the personal information of approximately 48 to 51.7 million users. The company discovered the breach later that year but did not notify affected members until February 2019. The attack vector remains unknown, and no specific threat actor has been publicly identified. The exposed data included names, email addresses, usernames, IP addresses, geographic locations, and passwords stored as salted bcrypt hashes. Some users had linked social media profiles exposed in place of passwords, depending on how they authenticated to the service. This combination of data is particularly sensitive in the home renovation context: geographic and profile information can reveal where someone lives, the value of their home, and their planned spending on renovation work, creating openings for phishing, contractor impersonation, and targeted fraud. Houzz notified affected users by email and required password resets for impacted accounts. No class-action settlement or significant regulatory action specific to this breach has been publicly documented. Affected individuals remain at elevated risk of credential-stuffing attacks if they reused their Houzz password on other services, as well as targeted scams that exploit their home improvement activity.

Home-design marketplaces collect customer identity, addresses, project inquiries, payment-adjacent records, and contractor or vendor interactions tied to renovation and interior-design workflows.

Houzz has continued to operate as a private company focused on its professional marketplace and home design content platform. The company underwent significant workforce reductions in 2023 as part of a cost reduction effort. No major ownership or structural changes have been reported in the most recent period.