DoorDash has revealed a security incident that resulted in the exposure of certain users’ personal details, such as their names, email addresses, phone numbers, and home addresses. The company did not specify how many individuals were affected.
Although attackers obtained phone numbers and home addresses, DoorDash stated that “no sensitive data was accessed by the unauthorized party, and at this point, we have no evidence that the information has been used for identity theft or fraudulent activity.”
According to the company’s statement, the breach affected a combination of customers, delivery drivers, and business partners. DoorDash did not answer questions regarding the exact number of people impacted by the incident.
The security breach was traced back to an employee who was deceived by a social engineering scheme. Once DoorDash detected the unauthorized access, it immediately blocked the hackers, launched an internal investigation, and notified law enforcement, as detailed in a company update last week.
DoorDash clarified that “Social Security numbers, other government-issued IDs, driver’s license details, and banking or payment card information” were not compromised in this incident.
The company has informed those whose information was affected.
