Anywhere Real Estate Inc., a real estate services company, experienced a data breach that was discovered on December 17, 2025. The incident involved a zero-day vulnerability in its Oracle E-Business Suite, leading to the exposure of personal information. The company disclosed that the breach occurred between August 13, 2025, and August 22, 2025. Outside legal counsel for Anywhere Real Estate Inc. submitted the breach notification.
Confirmed data types involved in the breach include names, addresses, contact information, dates of birth, Social Security numbers (SSNs), and basic job details. Financial account data and medical data were not mentioned as being compromised. The total number of affected individuals is 17,429, including current and former employees, franchisees, brokers, and associates. Notifications to affected individuals began on January 30, 2026.
Details about the full impact may continue to emerge. Companies often provide additional information or updates as their investigations progress, and regulatory filings can be delayed.