Sounds like phishing to me. You were very wise not to use the link in the email. I'm still signed in, so it sounds like you, alone, were targeted.

What puzzles me, though, is why I was signed out of Houzz, using one of the computers I'm normally on (I set it to keep me signed in). But, yea, seemed like phishing. Maybe it was just a coincidence I was signed out, who knows.

I didn't get the e-mail and I'm still signed in too, so yours sounds suspicious to me.... Maybe whoever stole your data used it to sign out - to make it more likely that you might use their link....?

I got an email too. That's why I've googled it and found this post. Will just delete the email.

Hackers could sign you out, then send the email.

I also got an email and did NOT click on the link. I ignored it. I could NOT, however, sign back into Houzz anymore with my old password. I did not use the email to reset the password, but rather requested a reset directly from the Houzz login site. It appears that the email may be legitimate, but it is always safer to reset from the actual website than a link that might be suspicious! Based on the email it appears that my Houzz account was part of the recent Equifax breach, I'm guessing?

My user name here is not the same as my e-mail, so how would it be affected by the Equifax breach? Also, if hacked thru Equifax, they already probably have our names, SSN #'s, and DL - that's pretty much all they need to wreak havoc. Getting hacked through a PC and getting bank info is just icing on the cake for them... Which is why I still prefer good ol' fashioned in-person or ATM banking, I do very little on-line with bank accounts, loan pmts, etc. Hey, if they hack my bank account I use for on-line shopping, they'll get a whopping 20 bucks LOL! (I have no other accounts at that bank whatsoever just because of that concern, and keep only enough in there to keep it open, deposit cash after I order something on-line -- more hassle but less worrisome that way). Man, why can't these criminal minds actually be put to use to solve some of the world's problems....

----Based on the email it appears that my Houzz account was part of the recent Equifax breach, I'm guessing?------

Not likely. Two separate hacks. The latter is the really dangerous one, and we're probably all in peril thanks to Equifax incompetence..

----if hacked thru Equifax, they already probably have our names, SSN #'s, and DL - that's pretty much all they need to wreak havoc. ....Man, why can't these criminal minds actually be put to use to solve some of the world's problems....----

The darker side of human nature is all around us. :-(

"My user name here is not the same as my e-mail, so how would it be affected by the Equifax breach?"

I assumed mine was because I get emails updates for new comments to posts, so my email is connected to my Houzz.

But that has nothing to do with the Equifax breach...

Yes, you are right. Finally got it through my thick head!

I'm scratching my head wondering why anybody would hack a gardening site.

They would hack it in order to get personal information. The scam works this way: they hack in, get emails of members, sign those members out, then send a mail to those persons telling them that their account was hacked and to click on a link to re-set their password. Those foolish enough to click on the link are taken to a site that requests personal info under the guise of re-setting their passwords ~OR~ clicking the link introduces malware to their computers. Either way, it aint good.

Another possibility could be that the email was legit and a few members' accounts were actually compromised. The way to protect yourself is to never click on a link in an email, but to go instead to your account via the forum's url to re-set your password, if you deem it necessary. The BEST way to protect yourself is to put zero sensitive personal info on any social media site. Emails and geographic locations are not sensitive, but birthdates, the name of your mother's maiden name, and the like could hurt hurt you if an identity thief gets hold of this info.

Got it, too. Reset my password first and then saw the email so I ignored it.

I did not get anything.