Delivery Hero Confirms Foodora Data Breach

mood · Jun 15, 2020

Delivery Hero Confirms Foodora Data Breach
Personal Details on 727,000 Accounts in 14 Countries Leaked
June 15, 2020
https://www.databreachtoday.com/delivery-hero-confirms-foodora-data-breach-a-14435

Delivery Hero, the online food delivery service, has confirmed a data breach of its Foodora brand.

Breached information from 14 countries includes personal details for 727,000 accounts - names, addresses, phone numbers and hashed passwords. It also contains latitude and longitude coordinates to six decimal points, which is accurate to within just a few inches. No financial data was leaked.
The data was posted May 19 on a well-known forum for leaking stolen data and also has been reposted online elsewhere.

"Unfortunately, we can confirm that a data breach has been identified concerning personal data dating back to 2016," Delivery Hero says. "The data originates from some countries across our current and previous markets."
Click to expand...

Most of the passwords have been hashed with bcrypt with a work factor of 11, which is high, Hunt says. The work factor is the number of iterations of the hashing algorithm that are performed on a plain-text password. The higher the work factor, the more computationally intensive it is to crack, according to OWASP.
But there are are some salted MD5 hashes in the Foodora data, Hunt says.

Hunt says several people alerted him to the Foodora breach over the last few weeks.

"It's amazing in this day and age to have data circulating between so many people and the organization not be aware of it," Hunt says.
Click to expand...

mood · Jun 16, 2020

Data has been added to Have I Been Pwned:

Foodora – 582,578 breached accounts

Foodora
In April 2016, the online food delivery service Foodora suffered a data breach which was then extensively redistributed online. The breach included the personal information of hundreds of thousands of customers from multiple countries including their names, delivery addresses, phone numbers and passwords stored as either a salted MD5 or a bcrypt hash.

Breach date: 22 April 2016
Date added to HIBP: 16 June 2020
Compromised accounts: 582,578
Compromised data: Email addresses, Names, Passwords, Phone numbers, Physical addresses
Permalink
Click to expand...

Log in or Sign up

Delivery Hero Confirms Foodora Data Breach

mood Updates Team

mood Updates Team

Log in or Sign up

Delivery Hero Confirms Foodora Data Breach

mood Updates Team

mood Updates Team

Useful Searches