Skip to main content

DoorDash security breach leaks info of millions of users

Food delivery service DoorDash has revealed it suffered a major data breach that put the details of millions of its customers at risk.

The company announced it suffered an attack that saw unauthorised third parties gain access to its customer database to steal information on a large number of users.

Around 4.9 million DoorDash users have been affected in the breach, which saw personal information including names, physical addresses, phone numbers, email addresses and even order history accessed illegally.

Threat

DoorDash says the attack occured on May 4th 2019, and that it took "immediate steps" to block further access and boost its security systems.

Users who joined the service on or before April 5th 2018 may have been affected, but anyone who signed up after then should be safe. DoorDash added that some customer payment cards may also have been affected, although the company says only the last four digits of these could have been revealed, with no full card numbers or CVV codes accessed - meaning users should be safe.

DoorDash says it is reaching out directly to specifc users that may have been affected, but is urging all users to reset their passwords, though it is not believed that any passwords have been compromised.

Delivery drivers and the merchants themselves were also affected by the breach, with around 100,000 full drivers licence details being leaked.

"We have taken a number of additional steps to further secure your data, which include adding additional protective security layers around the data, improving security protocols that govern access to our systems, and bringing in outside expertise to increase our ability to identify and repel threats," the company said in a statement.

"We deeply regret the frustration and inconvenience that this may cause you. Every member of the DoorDash community is important to us, and we want to assure you that we value your security and privacy."



from TechRadar - All the latest technology news https://ift.tt/2m6nadm

Comments

Popular posts from this blog

Airship acquires SMS commerce company ReplyBuy

Airship is announcing that it has acquired mobile commerce startup ReplyBuy . The startup (which was a finalist at TechCrunch’s 1st and Future competition in 2016) works with customers like entertainment venues and professional and college sports teams to send messages and sell tickets to fans via SMS. It raised $4 million in funding from Sand Hill Angels, Kosinski Ventures, SEAG Ventures, Enspire Capital, MRTNZ Ventures and others, according to Crunchbase . Airship, meanwhile, has been expanding its platform beyond push notifications to cover customer communication across SMS, email, mobile wallets and more. But CEO Brett Caine said this is the first time the company is moving into commerce. While sports and concerts tickets might not be a booming market right now, Caine suggested that the company is actually seeing increased purchasing activity “in and around the Airship platform” as businesses try to drive more in-app purchases. He also suggested that both the COVID-19 pandem...

TalentLMS