Skip to content

Havenly

Disclosed Aug 1, 20206 years ago1,369,180 accountsConfirmed

Official notice

In June 2020, the interior design website Havenly suffered a data breach which impacted almost 1.4 million members of the service. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as SHA-1 hashes, all of which was subsequently shared extensively throughout online hacking communities. The data was provided to HIBP by dehashed.com .

What is known

People affected1,369,180 (accounts in the leaked data, per Have I Been Pwned)
DisclosedAug 1, 2020
HappenedJun 25, 2020
AttackHacking
Data exposedEmails, Location, Names, Passwords, Phone numbers
SectorTech · US
StatusConfirmed
Check your emailHave I Been Pwned

Sources

Source
California Attorney General breach notice: Havenlyoag.ca.gov · Official notice
Have I Been Pwned: Havenlyhaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataAug 1, 20201,369,180
California AGresidents of CAAug 31, 2020
History of this record
  • 2026-09-25 · hibp: empty to Havenly · backfill source
  • 2026-09-25 · sector: other to tech · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["emails","location","names","passwords","phone"] · backfill source
  • 2026-09-25 · records_basis: empty to hibp · backfill source
  • 2026-09-25 · records: empty to 1369180 · backfill source
  • 2026-09-25 · disclosed: 2020-08-31 to 2020-08-01 · backfill source
  • 2026-09-25 · summary: empty to In June 2020, the interior design website Havenly suffered a data breach which impacted almost 1.4 million members of the service. The exposed data included email addresses, names, phone numbers, geographic locations and passwords stored as · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Havenly

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.