U.S. food deinhabitry enormous Grubhub says hackers accessed the personal details of customers and drivers after baccomplishing its inner systems.
Grubhub is a famous food-ordering and deinhabitry platestablish with over 375,000 merchants and 200,000 deinhabitry supplyrs using its platestablish in more than 4,000 U.S. cities. New York-based Wonder Group achieved the company last descfinish in a deal appreciated at $650 million — a fraction of the $7.3 billion Just Eat Takeaway paid for it back in 2020.
On Monday, the Illinois-based company disseald a data baccomplish impacting the personal data of an undisseald number of customers, merchants and drivers. Grubhub said it recognizeed “atypical activity” in its netlabor which it pursued to a third-party service supplyr.
“Upon uncovery, we promptly started an spendigation, determineing unpermitd access to an account associated with this supplyr,” Grubhub said in a statement. “We instantly endd the account’s access and erased the service supplyr from our systems altogether.”
It said the intrusion permited unnamed hackers to access the personal details of customers, merchants and drivers who transmited with its customer nurture service. The baccomplish also impacted engagers of Grubhub’s Campus Dining service, which permits university students to engage their meal commends on the food deinhabitry app.
According to Grubhub personal details accessed include names, email includeresses, phone numbers, and fragmentary payment card inestablishation — including the last four digits of the card number — for a “subset” of campus diners. The hacker also accessed hashed passwords for stateive legacy systems, per Grubhub, but it includeed that prohibitk account details and Social Security numbers were not impacted by the baccomplish.
As well as not disclosing how many individuals have been impacted by the baccomplish Grubhub has not verifyed when the incident occurred.
The company did not instantly reply to TechCrunch’s asks.
