Archive — US — techcrunch
DoorDash confirms data breach impacting users’ phone numbers and physicaladdresses
DoorDash confirmed a data breach affecting users' personal information, including names, phone numbers, and addresses, but stated that no sensitive data was accessed. The breach occurred due to an employee falling for a social engineering attack and has been reported to law enforcement. Impacted users have been notified, although DoorDash did not disclose the exact number of victims.
Key points
- DoorDash experienced a data breach revealing users' personal information (names, email addresses, phone numbers, and physical addresses).
- The breach was due to social engineering targeting an employee.
- No sensitive data was compromised (like Social Security numbers or financial info).
- DoorDash took immediate action to secure their systems and began an investigation.
- Users affected by the breach have been notified, but DoorDash withheld specific victim numbers.
Why it matters
- Data breaches have heightened consumer concerns regarding data privacy and security.
- In 2025, an increase in remote work has led to more social engineering attacks as companies are more digital.
- This incident can be related to ongoing trends in cybersecurity solutions and awareness programs used by businesses to fortify against similar breaches.
The DoorDash data breach underscores the vulnerabilities businesses face in protecting user data from social engineering attacks, highlighting the importance of security awareness training and advanced cybersecurity measures.