Grubhub discloses data breach, customers’ personal information leaked

Grubhub has revealed that a data breach has occurred. The American food ordering and delivery company is confident that the incident has been fully contained.

According to Grubhub, a security incident took place at a third-party contractor, resulting in authorized access to systems that contained personal information of an undisclosed number of customers.

The attackers were able to view and most likely copy full names, email addresses, phone numbers and partial payment card information. Security experts believe that hashed passwords for certain legacy systems may have been at risk as well.

Although the threat actor didn’t access passwords associated with Grubhub Marketplace, the company encourages customers to use unique passwords to minimize the risk. Customers that use the same password for other online services should change their login credentials.

When the data breach came to light, Grubhub immediately launched an investigation into the matter. Researchers found that merchant login information, full payment card numbers, bank account details, and social security numbers or copies of driver’s license numbers weren’t accessed.

To minimize the impact of the breach and to get to the bottom of the scope and nature of the incident, Grubhub has partnered with a third-party cybersecurity firm for a comprehensive investigation.

In addition, all relevant passwords have been rotated to prevent further potential unauthorized access. Lastly, the company has deployed additional internal safeguards measures.

“We remain dedicated to protecting the trust placed in us by our customers, merchants, and drivers. We have taken decisive steps to further secure our systems and are actively strengthening our security controls to prevent similar incidents in the future,” Grubhub says in a statement.

Grubhub is an ordering and delivery marketplace in the United States that connects customers with local restaurants, merchants and convenience retailers. Grubhub features 375,000 merchants and over 200,000 delivery partners in over 4,000 U.S. cities.