DoorDash
Disclosed Nov 13, 2025Unverified
Social engineering breach exposes DoorDash users' contact details
DoorDash said an employee fell for a social engineering attack, identified on October 25, 2025, letting a hacker access names, emails, phone numbers and addresses of some customers, delivery workers and merchants.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Nov 13, 2025 |
| Discovered | Oct 25, 2025 |
| Attack | Phishing |
| Data exposed | NamesEmailsPhone numbersAddresses |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
Other breaches at DoorDash
Hackers linked to Twilio breach use vendor credentials to access DoorDash dataVendor breach exposed emails, location data, names, payment cards, addresses and phone numbers.Vendor breach367K accountsRetailUSUnverifiedAug 25, 2022Hacking breachHacking exposed names and government IDs. Reported to the California AG.100K affectedTechUSSep 26, 2019
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.