What Information Was Compromised?

Various types of personal and financial information was taken from DoorDash, including:

• Names, email addresses, delivery addresses, order histories and phone numbers from users’ profiles. Profile passwords were also taken, but were “hashed and salted”—protective measures that scramble information in a way that makes it nearly impossible to read.
• The last four digits of some customers’ credit or debit cards. DoorDash says the full card numbers and card verification values (the three- or four-digit codes on the front or back of cards) weren’t taken.
• The last four digits of some delivery workers’ and merchants’ bank accounts.
• Driver’s license numbers of about 100,000 delivery people.

According to DoorDash, the debit, credit and bank account numbers taken won’t give hackers enough information to use cards or access bank accounts.

What Can You Do if You Were Affected?

DoorDash says it is working to contact those affected to let them know what information was taken. It has also created a 24/7 support line that you can reach by calling 855-646-4683.

Even if you haven’t been contacted, if you think your account or information could have been compromised, you should change your DoorDash password. If you used that password for any other accounts, you might want to change those accounts’ passwords as well.

If you’ve worked as a delivery person for DoorDash and believe your driver’s license number was stolen, you should report the theft to your local police department and your state’s Department of Motor Vehicles or transportation agency… [More]