DoorDash Says Personal Information Stolen in Data Breach

DoorDash says a recent data breach was caused by a social engineering attack against one employee, discovered on 25 October 2025. The attackers accessed personal information such as names, addresses, email addresses, and phone numbers across customers, Dashers, and merchants. DoorDash emphasises that no sensitive data such as Social Security numbers, government-issued IDs, driver’s licence information, or bank or payment card information was accessed.

The company also states there is no evidence that the stolen information has been misused for fraud or identity theft, and that no Wolt or Deliveroo customers have been impacted.

DoorDash has not published the total number of affected individuals, and notes that affected users may be in various regions since guidance directs users to contact its US/Canada or international call centres. according to DoorDash, the incident response involved identifying the breach, shutting down the unauthorized access, launching an investigation, and referring the matter to law enforcement.