Back to Radar
DO

DoorDash

Medium

The 2022 DoorDash breach impacted 367k users' details due to a third-party vendor phishing attack.

Records exposed
367,476 records
Breach date
Breach Aug 2, 2022
Last update
Updated Jan 7, 2023

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesGeographic locationsNamesPartial credit card data

Why does this breach matter?

In-depth analysis of the breach and its implications.

In August 2022, the food ordering and delivery platform DoorDash revealed a security breach affecting approximately 367,476 users. The breach originated due to a phishing attack directed at a third-party vendor connected to DoorDash, leading to the compromise of customer data including email addresses, geographic details, full names, and partial payment card information (brand, expiration date, and last four digits). DoorDash promptly addressed the issue by notifying affected users and enhancing their security defenses.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Exposed personal data could lead to phishing attempts or identity fraud.
Business Impact
Brand reputation damage and regulatory scrutiny.
Affected Sectors
  • E-commerce
  • Food services
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Monitor your payment card transactions for unauthorized activities.
  • Remain vigilant to phishing attempts and unsolicited communications.

Preventive Measures

  • Enable multifactor authentication on all accounts.
  • Select vendors employing strong security practices.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Email addresses, names, geographic details, and partial payment card information.