Grubhub

Disclosed Feb 3, 2025Unverified

Grubhub breach via third-party support provider exposes users' data

Grubhub said hackers used an account belonging to a third-party customer care service provider to access personal details of customers, merchants and drivers who contacted support, as well as Campus Dining users; partial card data and some legacy hashed passwords were also accessed.

What is known

People affected	Not stated in the sources we have
Disclosed	Feb 3, 2025
Attack	Vendor breach
Data exposed	NamesEmailsPhone numbersPayment cardsPasswords
Sector	Retail · US
Status	Unverified: not yet confirmed by an official notice, a filing or the organization

Sources

Newstechcrunch.com

Grubhub confirms data breach affecting customers and drivers

Newsbleepingcomputer.com

GrubHub data breach impacts customers, drivers, and merchants

Notices filed

TotalFeb 3, 2025

ResearchCount not stated

Other breaches at Grubhub

Grubhub confirms data theft using secrets stolen in Salesloft Drift attacksSupply chain exposed names and emails.Supply chainRetailUSUnverifiedJan 15

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Grubhub