DoorDash Data Breach

DoorDash Data Breach: What to Know

Provided by Experian

Published October, 2019 | Experian

On Sept. 26, DoorDash announced a data breach that affected nearly 5 million of its customers, restaurant owners and delivery workers, potentially exposing their personal information to hackers.

The food delivery and pickup company investigated the breach that occurred on May 4, when it says an unauthorized third party was able to access the information of users who joined before April 6, 2018. DoorDash says it immediately locked out the third party and took steps to ramp up its data security.

What Information Was Compromised?

Various types of personal and financial information was taken from DoorDash, including:

  • Names, email addresses, delivery addresses, order histories and phone numbers from users’ profiles. Profile passwords were also taken, but were “hashed and salted”—protective measures that scramble information in a way that makes it nearly impossible to read.
  • The last four digits of some customers’ credit or debit cards. DoorDash says the full card numbers and card verification values (the three- or four-digit codes on the front or back of cards) weren’t taken.
  • The last four digits of some delivery workers’ and merchants’ bank accounts.
  • Driver’s license numbers of about 100,000 delivery people.

According to DoorDash, the debit, credit and bank account numbers taken won’t give hackers enough information to use cards or access bank accounts.

What Can You Do if You Were Affected?

DoorDash says it is working to contact those affected to let them know what information was taken. It has also created a 24/7 support line that you can reach by calling 855-646-4683.

Even if you haven’t been contacted, if you think your account or information could have been compromised, you should change your DoorDash password. If you used that password for any other accounts, you might want to change those accounts’ passwords as well.

If you’ve worked as a delivery person for DoorDash and believe your driver’s license number was stolen, you should report the theft to your local police department and your state’s Department of Motor Vehicles or transportation agency… [More]


To read the full article at Experian, visit: DoorDash Data Breach