Original Release Date: 10/7/2019
An unauthorized third party accessed user data for the popular on-demand food delivery service, DoorDash, affecting approximately 4.9 million consumers, Dashers, and merchants who joined on or before April 5, 2018. Users who joined after April 5, 2018 were not affected. The breached user data includes profile information, the last four digits of consumer payment cards, the last four digits of bank account numbers, and driver’s license numbers. Since the breach, DoorDash has taken steps to block access by the unauthorized user, enhance security, notify affected users, and encourage users to change their passwords as a precautionary measure.