Monday, April 28, 2025
HomeCyber Security NewsHackers Stole 4.9 Million Users Data from Food Delivery Service DoorDash

Hackers Stole 4.9 Million Users Data from Food Delivery Service DoorDash

Published on

SIEM as a Service

Follow Us on Google News

DoorDash announced a data breach that impacts 4.9 million consumers, Dashers, and merchants who signed up with the platform on or before April 5, 2018.

The company has learned an unusual activity earlier this month, they have launched an investigation with assistance from external security researchers. The investigation determines an unauthorized third party to DoorDash user data on May 4, 2019.

What are the DoorDash Data Exposed

The company has not provided any details about how the hackers gain access to the data stored and they confirmed that they have blocked the unauthorized user.

- Advertisement - Google News

Exposed data includes names, email addresses, delivery addresses, order history, phone numbers, as well as hashed, salted passwords, last four digits of payment card details, last four digits of bank account numbers 100,000 Dashers driver license.

According to the report, not all the customers who joined before April 5, 2018, are affected. Also the companies no user joined after April 5, 2018, were affected.

“We took immediate steps to block further access by the unauthorized user and to enhance security across our platform.”

“We do not believe that user passwords have been compromised and the information accessed is not sufficient to make fraudulent charges on payment cards or fraudulent withdrawals from bank accounts.” DoorDash said.

The company started notifying affected users, if you are the one affected then it is recommended to reset their DoorDash password associated with the DoorDash account.

DoorDash is a San Francisco–based food delivery service found in 2013, the company delivers door-to-door delivery from restaurants on-demand.

Related Coverage

Biometric Security Platform Data Breach Leaked Millions of Users Facial Recognition & Fingerprinting Data

British Airways Facing £183.39 Million Fine Under GDPR for 2018 Data Breach

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

SAP NetWeaver 0-Day Flaw Actively Exploited to Deploy Webshells

SAP disclosed a critical zero-day vulnerability, identified as CVE-2025-31324, in its NetWeaver Visual Composer component. This...

Windows 11 25H2 Expected to Launch with Minor Changes

Microsoft is quietly preparing the next update to its flagship operating system, Windows 11 25H2,...

China Claims U.S. Cyberattack Targeted Leading Encryption Company

China has accused U.S. intelligence agencies of carrying out a sophisticated cyberattack against one...

Critical FastCGI Library Flaw Exposes Embedded Devices to Code Execution

A severe vulnerability (CVE-2025-23016) in the FastCGI library-a core component of lightweight web server...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

SAP NetWeaver 0-Day Flaw Actively Exploited to Deploy Webshells

SAP disclosed a critical zero-day vulnerability, identified as CVE-2025-31324, in its NetWeaver Visual Composer component. This...

Windows 11 25H2 Expected to Launch with Minor Changes

Microsoft is quietly preparing the next update to its flagship operating system, Windows 11 25H2,...

China Claims U.S. Cyberattack Targeted Leading Encryption Company

China has accused U.S. intelligence agencies of carrying out a sophisticated cyberattack against one...