DoorDash confirms data breach affected 4.9 million customers, workers and merchants

guest · Sep 26, 2019

DoorDash confirms data breach affected 4.9 million customers, workers and merchants
September 26, 2019
https://techcrunch.com/2019/09/26/doordash-data-breach/

DoorDash has confirmed a data breach.
The food delivery company said in a blog post Thursday that 4.9 million customers, delivery workers and merchants had their information stolen by hackers.

The breach happened on May 4, the company said, but added that customers who joined after April 5, 2018 are not affected by the breach.
It’s not clear why it took almost five months for DoorDash to publicly reveal the breach, nor when reached would the company say why.

Users who joined the platform before April 5, 2018 had their name, email and delivery addresses, order history, phone numbers, and hashed and salted passwords stolen.
The company also said consumers had the last-four digits of their payment cards was also taken, though full numbers and card verification values (CVV) were not taken. Both delivery workers and merchants had the last four-digits of their bank account numbers stolen.
Click to expand...

DoorDash: Important security notice about your DoorDash account

guest · Sep 28, 2019

DoorDash data mishap showcases hazards of third-party vendors
September 27, 2019
https://www.complianceweek.com/thir...-hazards-of-third-party-vendors/27788.article

The food delivery service alerted people to “unusual activity involving a third-party service provider” resulting in unauthorized third-party access to user data.

While any number of companies have been through this drill before, this latest data incident serves as a reminder that not only do companies need to mind their own cyber-security—they also need to keep an eye on the data protection practices of their third-party vendors.

“Hackers know they can maximize their investment of time and exploits by targeting vendors, because one successful vendor hack can provide access to a range of clients as to which the vendor has sensitive access or data,” explained Luke Dembosky, a partner at the law firm Debevoise & Plimpton and co-chair of its cyber practice.
No matter how the DoorDash mishap is labeled, it serves as a reminder to monitor third parties. “Oftentimes companies overlook or fail to appreciate the security risks posed by third-party vendors,” Reynolds said.

“Do not give vendors more data than they need to do their job and limit any direct access the vendor has to the business systems,” she cautioned. Once the vendor has the data, “confirm the vendor has and follows proper procedures to protect the data as well as to respond to any data incidents,” Vincent suggested.
Click to expand...

guest · Sep 30, 2019

Hey Doordash: Why Are You Hiding Your 'Security Notice' From Google Just Days After You Revealed A Massive Security Breach?
September 30, 2019
https://www.techdirt.com/articles/2...er-you-revealed-massive-security-breach.shtml

As you might have heard, late last week, delivery company DoorDash admitted via a Medium post that there had been a large data breach exposing info on 4.9 million users of the service. The breach had actually happened months earlier, but was only just discovered earlier this month.

All in all a somewhat typical breach that happens these days. However, as TechCrunch cybersecurity reporter Zack Whittaker noticed, somewhere right around the time the breach went up, DoorDash told Google to stop indexing its "SecurityNotices" page via robots.text.
He also notes that DoorDash doesn't seem to be going out of its way to alert people to the breach -- pointing out that there's nothing on DoorDash's front page, or on its various social media accounts. Just the blog post on Medium.

And, also, yanking your "securitynotices" directory from Google (even if it currently appears blank) seems super suspicious.
However, proactively trying to keep things quiet about this... well... that's the kind of thing that raises eyebrows and destroys trust.
Click to expand...

guest · Oct 4, 2019

DoorDash data breach that affected 4.9M users draws class action suit
October 4, 2019
https://nypost.com/2019/10/04/doordash-data-breach-that-affected-4-9m-users-draws-class-action-suit/

At least one of the DoorDash users who claims she is among the nearly 5 million people affected by a massive data theft wants to take a bite out of the food delivery giant.

On Friday, a Queens woman filed a class action lawsuit in Brooklyn federal court against the Silicon Valley company regarding the data breach, which occurred in May and affected users, merchants and delivery workers who joined the platform prior to April 5, 2018.
Additionally, Nelson claims that no third-parties have verified DoorDash’s claim that the data breach did not affect people who joined the platform after April 5, 2018.
Click to expand...

Log in or Sign up

DoorDash confirms data breach affected 4.9 million customers, workers and merchants

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

DoorDash confirms data breach affected 4.9 million customers, workers and merchants

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches