{"id":58127,"date":"2025-02-06T15:08:00","date_gmt":"2025-02-06T15:08:00","guid":{"rendered":"http:\/\/0b98e680-ebaa-4059-a159-e60cfe399fc3"},"modified":"2025-02-06T15:08:00","modified_gmt":"2025-02-06T15:08:00","slug":"grubhub-breach-exposed-customer-data-should-you-be-worried","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/grubhub-breach-exposed-customer-data-should-you-be-worried\/","title":{"rendered":"Grubhub breach exposed customer data. Should you be worried?"},"content":{"rendered":"
\n
\n
\"Grubhub<\/picture><\/div>\n<\/p><\/div>
ZDNET<\/span><\/figcaption><\/figure>\n

Grubhub was hit by a data breach that compromised account information for a certain set of customers. Revealing the breach earlier this week<\/a>, the food delivery service said that the attacker exploited an account belonging to a third party that provided support for the company. In response, Grubhub deleted the account’s access and removed the provider from its systems.<\/p>\n

Customer data in breach<\/h2>\n

Caught up in the breach were the names, email addresses, phone numbers, and the card type and last four digits of the payment cards used by Grubhub campus diners, as well as diners, merchants, and drivers who used its customer care service. The campus dining program<\/a> is one in which students use the service to order food both on and off campus. Grubhub offers dedicated help and support services for different types of users.<\/p>\n

Also: Proton Pass vs. 1Password: Which password manager is right for you?<\/a><\/strong><\/p>\n

The attacker also retrieved hashed passwords for certain legacy systems, prompting Grubhub to change any passwords that may have been accessed.<\/p>\n

However, the company said that no sensitive personal information was compromised in the breach. That includes Grubhub Marketplace customer passwords, merchant login information, full payment card numbers, bank account details, and Social Security or driver’s license numbers.<\/p>\n

<\/p>\n

How Grubhub responded to the breach<\/h2>\n

To respond to the breach and to try to prevent future incidents, Grubhub said it took the following steps:<\/p>\n