Grubhub Data Breach: Impact on Customers and Drivers Revealed
Grubhub, a leading food delivery service in the U.S., has confirmed a significant data breach that compromised the personal information of customers and drivers. This incident highlights the growing concerns surrounding data security in the food delivery industry.
What Happened in the Grubhub Data Breach?
On Monday, Grubhub disclosed that hackers gained unauthorized access to sensitive personal data due to a breach of its internal systems. The Illinois-based company reported that it detected “unusual activity” linked to a third-party service provider.
Investigation and Response
In response to the breach, Grubhub promptly initiated an investigation. The company stated:
“Upon discovery, we promptly launched an investigation, identifying unauthorized access to an account associated with this provider.”
As part of their response, Grubhub took immediate action by:
- Terminating the account’s access.
- Removing the service provider from its systems.
Details of the Breach
The hackers were able to access personal information from customers, merchants, and drivers who interacted with Grubhub’s customer care service. This breach also impacted users of Grubhub’s Campus Dining service, which is utilized by university students to redeem meal credits through the app.
Types of Data Compromised
According to Grubhub, the following personal details were accessed:
- Names
- Email addresses
- Phone numbers
- Partial payment card information (including the last four digits)
- Hashed passwords for certain legacy systems
Fortunately, Grubhub confirmed that bank account details and Social Security numbers were not compromised during this incident.
Impact and Future Steps
While Grubhub has yet to disclose the exact number of affected individuals or the precise timing of the breach, this situation underscores the importance of robust data security measures in the food delivery sector. For more information on how to protect your personal data, visit FTC’s guide on protecting personal information.
The company has not yet responded to inquiries from TechCrunch regarding additional details about the breach.