Breachesby GlyphDoorDash
Disclosed Aug 25, 2022367,476 accountsUnverified
Hackers linked to Twilio breach use vendor credentials to access DoorDash data
DoorDash said attackers used credentials stolen from employees of a third-party vendor to access internal tools, exposing customer names, emails, delivery addresses and phone numbers, plus partial card data for a smaller subset. It did not say how many users were affected.
What is known
| People affected | 367,476 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Aug 25, 2022 |
| Happened | Aug 2, 2022 |
| Attack | Vendor breach |
| Data exposed | EmailsLocationNamesPayment cardsAddressesPhone numbers |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Other breaches at DoorDash
History of this record
aggregator to pressby seedSource
https://haveibeenpwned.com/Breach/DoorDash to https://techcrunch.com/2022/08/25/doordash-customer-data-breach-twilio/by seedSource
empty to USby seedSource
tech to retailby seedSource
["emails","location","names","payment-card"] to ["emails","location","names","payment-card","addresses","phone"]by seedSource
2023-01-07 to 2022-08-25by seedSource
In August 2022, the food ordering and delivery service DoorDash disclosed a data breach that impacted a portion of their customers . DoorDash attributed the breach to an unnamed "third-party vendor" they stated was the victim of a phishing to DoorDash said attackers used credentials stolen from employees of a third-party vendor to access internal tools, exposing customer names, emails, delivery addresses and phone numbers, plus partial card data for a smaller subset. It did not by seedSource
empty to Hackers linked to Twilio breach use vendor credentials to access DoorDash databy seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.