Grubhub confirms data breach affecting customers and drivers.
Mohammed Mohtasimuddin
SOC Analyst | Skilled in Network Security, Ethical Hacking, and Cyber Threat Protection | Splunk | EDR & XDR | CEHV12 | Threat detection and response | Malware Analysis.
Grubhub Data Breach: Personal Details of Customers, Merchants, and Drivers Compromised
Grubhub, a leading U.S. food delivery platform, has disclosed a data breach that exposed sensitive personal details of customers, merchants, and delivery drivers. The breach, which was traced back to an unnamed third-party service provider, was discovered after the company detected unusual activity within its internal network.
Breach Discovery and Response
Upon identifying suspicious activity, Grubhub launched an internal investigation and traced the breach to unauthorized access through an account linked to the third-party service provider. In response, the company immediately terminated the compromised account’s access and completely removed the service provider from its systems to prevent further exploitation.
Compromised Data
Grubhub confirmed that hackers gained access to various personal details of affected individuals, including:
Additionally, the breach exposed hashed passwords associated with certain legacy systems. However, Grubhub assured that more sensitive financial data, such as full bank account details and Social Security numbers, were not compromised.
领英推荐
Impact on Campus Dining Service
The breach particularly affected users of Grubhub’s Campus Dining service, which allows university students to use meal credits through the food delivery platform. While the company has not specified how many students were affected, it acknowledged that a subset of campus diners had their partial payment card details exposed.
Lack of Transparency on Scope and Timeline
Despite disclosing the breach, Grubhub has not provided critical details, such as the exact number of individuals impacted or the timeframe during which the breach occurred. Without this information, customers, merchants, and drivers are left uncertain about the full extent of their exposure.
Ownership and Business Background
Grubhub, headquartered in Illinois, operates in over 4,000 U.S. cities with a network of 375,000 merchants and 200,000 delivery drivers. The company was acquired by Wonder Group in late 2023 for $650 million, a significant drop from the $7.3 billion valuation paid by Just Eat Takeaway in 2020.