DoorDash data breach exposes personal info after social engineering attack

According to DoorDash, a social engineering attack led to a data breach that exposed the names, addresses, emails, and phone numbers of users, Dashers, and merchants. The company said one employee was targeted, but access was shut down and law enforcement was notified, with no evidence that the data has been misused for fraud or identity theft at this time. DoorDash also stated that no sensitive information such as SSNs, IDs, driver’s licences, or bank/payment details was accessed.

It remains unclear how large the breach is or how many individuals were affected. The firm added that there is no indication Wolt or Deliveroo customers were impacted, and it emphasised that impacted users have been notified.