The California Office of the Attorney General disclosed a data breach affecting Havenly, Inc. on August 31, 2020, stemming from unauthorized access to a company database. The incident, believed to have occurred on June 25, 2020, exposed usernames and hashed passwords of users. While the breach compromised login credentials, it did not involve more sensitive data such as full credit card numbers, billing addresses, or other personally identifiable financial information. The exposure of hashed passwords—though not plaintext—still poses a risk of credential-stuffing attacks or account takeovers if users reused passwords across platforms. The company likely faced reputational damage and potential regulatory scrutiny under data protection laws, though the financial or operational impact appeared limited to authentication-related risks. No evidence suggested the breach escalated to broader data exfiltration or direct financial fraud against affected users.