Redfin Data Breach Exposes Social Security Numbers

Redfin Corp., a technology-driven real estate company headquartered in Seattle, has disclosed a data breach that may have exposed sensitive personal information belonging to consumers.

The company operates one of the most-visited real estate brokerage websites in the United States and provides a range of services, including home search, brokerage, rentals, mortgage origination and title and settlement services through its online platform and mobile app.

The breach is being reported to the Massachusetts Office of Consumer Affairs and Business Regulation, with 55 Massachusetts residents identified on Sept. 24, 2026.

Redfin experienced a security incident resulting in an unauthorized third party accessing personal information of individuals. At this time, the specific details such as the timeline of the unauthorized access remains undisclosed at this time.

The personally identifiable information potentially exposed in the breach includes Social Security numbers, financial account information and driver's license numbers. Social Security numbers are permanent identifiers that cannot easily be changed. When combined with financial account data and driver's license numbers, this type of information could potentially be used to commit identity theft or open fraudulent accounts.

Redfin's response to the breach

Redfin is offering two years of free identity protection services through IDX. Individuals who received a notification letter can enroll by visiting the IDX enrollment page or by scanning the QR code included in their letter, using the unique enrollment code provided.

The deadline to enroll is Dec. 23, 2026.

Those with questions about the incident or the identity protection services can contact IDX at 1-888-204-3205. Representatives are available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time, excluding holidays.