2018 TaskRabbit — unauthorized access; millions of tasker/client records
Data compromised
Names, usernames, passwords (hashed), DOB, contact data, truncated bank/card data; tasker financial and tax identifiers for subset per nature-of-service
Technical writeup
IKEA-owned TaskRabbit disclosed a cybersecurity incident in mid-April 2018, took its app and website offline for investigation, and later advised users to change passwords. Notifications and litigation summaries described exposure of names, usernames, hashed passwords, birthdates, contact and payment-card fields (often truncated), and for some taskers bank-account and Social Security number details—varying by user cohort. Public estimates of impacted individuals frequently cited on the order of 3.7–3.8 million records.
Root cause
Unauthorized network/system access; forensic specifics not uniformly public