2025 Grubhub — 17M, third-party
Data compromised
Names, email, phone, partial card, passwords
Technical writeup
Third-party support account. 70M lines. Names, email, phone, partial card, hashed passwords. Customer, driver, merchant data.
Root cause
Third-party compromise