- DoorDash suffered a breach exposing user contact data via social engineering
- Victims include customers, merchants and employees; SSNs may have been compromised
- No credit monitoring offered; phishing risks remain high after the breach
Popular food delivery platform DoorDash suffered a cyberattack that caused it to lose sensitive data on an undisclosed number of users.
The company began sending data breach notification emails to affected individuals, in which it states that it spotted the intrusion on October 25, 2025.
DoorDash said the attackers stole people’s names, phone numbers, email addresses and mailing addresses, but in a slightly odd comment it said “no sensitive information was accessed.”
Customers, merchants and employees concerned
The breach occurred after one of the employees fell for a social engineering scam and granted the attackers access to the platform.
We don’t know exactly how many people were affected by the breach, but DoorDash said the incident involved customers, merchants, and employees.
The notifications appear to have been sent primarily to Canadian users, but US citizens may also have been affected, as in an undated security advisory on the DoorDash site, Social Security numbers (SSN) – primarily a US data type – were also mentioned.
“We have already taken steps to respond to the incident, including deploying enhancements to our security systems, further training our employees, retaining a leading cybersecurity forensic firm to assist us in our investigation of the issue, and notifying law enforcement so that an investigation is underway,” the notice states.
There is no mention of identity theft or credit monitoring services being offered to victims, which is a common practice in these situations.
Even if that were the case, customers and users should still be wary of incoming emails and other communications, especially those claiming to be from DoorDash. There is a good chance that cybercriminals will try to use the stolen data to trick their victims into installing malware or granting access to social media accounts, banking platforms or even business applications.
Via BeepComputer
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.
