ANYWHERE REAL ESTATE INC.

Anywhere Real Estate Inc notified Massachusetts residents of a security incident resulting in unauthorized access to personal information of current and former employees. Affected data includes names, addresses, dates of birth, and Social Security numbers. The company is offering 24 months of complimentary credit monitoring and identity restoration services through Experian. The specific cause, dates of occurrence, and number of affected individuals were not disclosed in this notice.

Anywhere Real Estate Inc. disclosed a cybersecurity incident discovered on November 24, 2025. An unauthorized third party exploited a zero-day vulnerability in Oracle E-Business Suite to access and exfiltrate personal information of current and former employees, including names, addresses, dates of birth, Social Security numbers, and basic job details. The company remediated the vulnerability and is offering 24 months of credit monitoring.

Anywhere Real Estate Inc. reported a cybersecurity incident involving its Oracle E-Business Suite environment. An unauthorized third party exploited a zero-day Oracle vulnerability between August 13-22, 2025, to exfiltrate personal information of current and former employees, including SSNs and DOBs. The incident was discovered on November 24, 2025. The company engaged third-party experts, remediated the vulnerability, and offered 24 months of credit monitoring to the 17,429 affected individuals.

Anywhere Real Estate Inc. notified the New Hampshire Attorney General of a cybersecurity incident involving its Oracle E-Business Suite. An unauthorized third party exploited a zero-day vulnerability (CVE-2025-61882) on August 13, 2025, to access the system and exfiltrate employee data, including SSNs and names. The breach was discovered on November 24, 2025, affecting 151 New Hampshire residents. Notices were sent on January 30, 2026, offering 24 months of credit monitoring.

Anywhere Real Estate Inc. based in Madison, New Jersey, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-12-17 and reported on 2026-02-02. 1,487 Texas residents were affected. 17,429 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Date of Birth. Consumers were notified via U.S. Mail.

Anywhere Real Estate Inc. disclosed a cybersecurity incident on November 24, 2025, involving its Oracle E-Business Suite. An unauthorized third party exploited a zero-day vulnerability to access the system and exfiltrate personal information, including names, addresses, SSNs, and job details, of current and former employees and franchisees. Anywhere engaged third-party experts, remediated the vulnerability, and offered 24 months of credit monitoring via Experian.

Anywhere Real Estate Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-08-13 and was reported on 2026-01-30. 89 Indiana residents were affected.

Anywhere Real Estate Inc. disclosed a cybersecurity incident discovered on November 24, 2025, involving its Oracle E-Business Suite. An unauthorized third party exploited a zero-day vulnerability to access the environment and exfiltrate personal information, including names, SSNs, and dates of birth, of current and former employees and franchisees. The company engaged third-party experts, remediated the vulnerability, and offered 24 months of credit monitoring.

"ANYWHERE.RE" is a proptech solution providing a comprehensive and innovative platform that transforms the real estate industry. It combines Augmented Reality (AR), Artificial Intelligence (AI), and big data for assisting real estate developers, brokers, and agents make data-driven decisions. In addition, it enhances the way potential buyers view and experience properties through virtual tours.