Summary

  • Food delivery company Grubhub has admitted to a data breach, revealing that customer, driver and merchant data had been compromised.
  • This included partial credit card details and hashed passwords.
  • The breach was traced back to the account of a third-party customer service provider, which was immediately removed and blocked.
  • Customer data, as well as drivers and merchants who used the customer service system, was accessed, including names, email addresses, phone numbers and the last four digits of credit cards.
  • Grubhub has not revealed when the breach took place, but says it has advised affected customers and rotated passwords.
  • Full payment card details and bank account information were not accessed, the company added.

Original Article