Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Personal Information Compromised in GrubHub Data Breach

Food delivery firm GrubHub has disclosed a data breach impacting the personal information of drivers and customers.

GrubHub data breach

Food delivery firm GrubHub on Monday disclosed a data breach that resulted in customer and driver information getting compromised. 

According to GrubHub, the incident was discovered recently, when the company saw unusual activity within its environment. An investigation showed that someone had compromised an account associated with a third-party provider of support services.

The unauthorized access was quickly terminated, and the hacked account and the third-party vendor using it were removed.

However, the probe showed that the attacker did manage to gain access to contact information belonging to diners, merchants and drivers who interacted with GrubHub’s customer care service.

The hackers may have stolen names, email addresses, and phone numbers, along with partial payment card information for some campus diners (last four digits of the card’s number and the card’s type). 

The compromised information also includes hashed passwords for some legacy systems. Those passwords have been reset in response to the incident. 

The food delivery giant noted that GrubHub marketplace customer passwords, merchant login information, Social Security numbers, bank account information, and full credit card numbers were not affected.

The company has taken action to further improve its security against such threats, including the deployment of additional anomaly detection systems for internal services. 

Advertisement. Scroll to continue reading.

SecurityWeek has reached out to GrubHub to find out how many individuals are impacted by the incident and whether the attack was conducted by a ransomware group. No known ransomware gang has taken credit for the attack at the time of writing. 

Related: Hundreds of Thousands Hit by Data Breaches at Healthcare Firms in Colorado, North Carolina

Related: Insurance Company Globe Life Notifying 850,000 People of Data Breach

Related: 1 Million Impacted by Data Breach at Connecticut Healthcare Provider

Related: NorthBay Health Data Breach Impacts 569,000 Individuals

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Discover strategies for vendor selection, integration to minimize redundancies, and maximizing ROI from your cybersecurity investments. Gain actionable insights to ensure your stack is ready for tomorrow’s challenges.

Register

Dive into critical topics such as incident response, threat intelligence, and attack surface management. Learn how to align cyber resilience plans with business objectives to reduce potential impacts and secure your organization in an ever-evolving threat landscape.

Register

People on the Move

Software giant Atlassian has named David Cross as its new CISO.

Dan Pagel has been named the new CEO of risk management and remediation firm Brinqa.

The City of Phoenix has promoted Mitch Kohlbecker to the role of Chief Information Security Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.