DoorDash Inc said personal details of some customers and drivers had been accessed by an “unauthorised party” in a phishing attack on a third-party vendor.
The US food delivery firm said details accessed included order and partial payment card information, email, delivery address and phone number of some customers.
The unauthorised party, which used stolen credentials of the vendor’s employees to gain access to some internal tools, also got hold of names, phone numbers or email addresses of some drivers, DoorDash added.
The company said it quickly disabled the vendor’s access to its system after detecting unusual and suspicious activity from the vendor’s computer network.
“We have no reason to believe that affected personal information has been misused for fraud or identity theft,” DoorDash said.
FacebookTwitterLinkedin
