
U.S. meals supply big Grubhub says hackers accessed the private particulars of consumers and drivers after breaching its inside programs.
Grubhub is a well-liked food-ordering and supply platform with over 375,000 retailers and 200,000 supply suppliers utilizing its platform in additional than 4,000 U.S. cities. New York-based Wonder Group acquired the company final fall in a deal valued at $650 million — a fraction of the $7.3 billion Just Eat Takeaway paid for it back in 2020.
On Monday, the Illinois-based firm disclosed an information breach impacting the private knowledge of an undisclosed variety of clients, retailers and drivers. Grubhub mentioned it detected “uncommon exercise” in its community which it traced to a third-party service supplier.
“Upon discovery, we promptly launched an investigation, figuring out unauthorized entry to an account related to this supplier,” Grubhub said in a statement. “We instantly terminated the account’s entry and eliminated the service supplier from our programs altogether.”
It mentioned the intrusion allowed unnamed hackers to entry the private particulars of consumers, retailers and drivers who interacted with its buyer care service. The breach additionally affected customers of Grubhub’s Campus Eating service, which permits college college students to make use of their meal credit on the meals supply app.
In accordance with Grubhub private particulars accessed embody names, electronic mail addresses, telephone numbers, and partial cost card info — together with the final 4 digits of the cardboard quantity — for a “subset” of campus diners. The hacker additionally accessed hashed passwords for sure legacy programs, per Grubhub, however it added that checking account particulars and Social Safety numbers weren’t affected by the breach.
In addition to not disclosing what number of people have been affected by the breach Grubhub has not confirmed when the incident occurred.
The corporate didn’t instantly reply to TechCrunch’s questions.