Redfin Corp.: Redfin Data Breach Exposes Social Security Numbers

Redfin Corp.: Redfin Data Breach Exposes Social Security Numbers

Redfin Data Breach Exposes Sensitive Consumer Information

Redfin Corp., a Seattle-based real estate technology company, has reported a data breach that may have compromised the personal information of consumers. The company, which operates a leading U.S. real estate brokerage platform offering home search, mortgage, and settlement services, disclosed the incident to the Massachusetts Office of Consumer Affairs and Business Regulation on September 24, 2026, identifying 55 affected Massachusetts residents.

The breach involved unauthorized third-party access to sensitive data, though the exact timeline of the intrusion remains undisclosed. Exposed information includes Social Security numbers, financial account details, and driver’s license numbers data that could facilitate identity theft or fraudulent account openings.

In response, Redfin is providing affected individuals with two years of free identity protection services through IDX. Those notified can enroll by December 23, 2026, using a unique code via the IDX enrollment page or a QR code in their notification letter. Support is available at 1-888-204-3205 (Monday–Friday, 9 a.m.–9 p.m. ET). The full scope of the breach and its impact on other users is still under investigation.

Source: https://www.claimdepot.com/data-breach/redfin-2026

Redfin Corp. TPRM report: https://www.rankiteo.com/company/redfin

"id": "red1790375257",
"linkid": "redfin",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '55 (Massachusetts residents '
                                              'only, full scope under '
                                              'investigation)',
                        'industry': 'Real Estate, Technology',
                        'location': 'Seattle, Washington, USA',
                        'name': 'Redfin Corp.',
                        'type': 'Real estate technology company'}],
 'customer_advisories': 'Two years of free identity protection services '
                        'through IDX, enrollment deadline: December 23, 2026. '
                        'Support contact: 1-888-204-3205 (Monday–Friday, 9 '
                        'a.m.–9 p.m. ET).',
 'data_breach': {'number_of_records_exposed': '55 (Massachusetts residents '
                                              'only, full scope under '
                                              'investigation)',
                 'personally_identifiable_information': 'Social Security '
                                                        'numbers, driver’s '
                                                        'license numbers',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal Identifiable '
                                             'Information (PII), Financial '
                                             'Data'},
 'date_publicly_disclosed': '2026-09-24',
 'description': 'Redfin Corp., a Seattle-based real estate technology company, '
                'reported a data breach that may have compromised the personal '
                'information of consumers. The breach involved unauthorized '
                'third-party access to sensitive data, including Social '
                'Security numbers, financial account details, and driver’s '
                'license numbers.',
 'impact': {'data_compromised': 'Social Security numbers, financial account '
                                'details, driver’s license numbers',
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Massachusetts Office of Consumer Affairs and '
                           'Business Regulation'}],
 'regulatory_compliance': {'regulatory_notifications': 'Massachusetts Office '
                                                       'of Consumer Affairs '
                                                       'and Business '
                                                       'Regulation'},
 'response': {'communication_strategy': 'Notification letters with QR codes, '
                                        'enrollment page for identity '
                                        'protection services',
              'third_party_assistance': 'IDX (identity protection services)'},
 'threat_actor': 'Unauthorized third-party',
 'title': 'Redfin Data Breach Exposes Sensitive Consumer Information',
 'type': 'Data Breach'}
Great! Next, complete checkout for full access to Rankiteo Blog.
Welcome back! You've successfully signed in.
You've successfully subscribed to Rankiteo Blog.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.