Grubhub
Disclosed Jan 15, 20268 months agoUnverified
Grubhub confirms data theft using secrets stolen in Salesloft Drift attacks
Grubhub confirmed that unauthorized individuals downloaded data from some of its systems and said financial information and order history were not affected. Sources linked the intrusion to credentials stolen in the 2025 Salesloft Drift attacks, and the company reportedly faced extortion demands.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 15, 2026 |
| Discovered | Jan 2026 |
| Attack | Supply chain |
| Data exposed | Names, Emails, Other |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Part of | Salesloft drift (2025) |
Sources
| Source | |
|---|---|
| Grubhub confirms hackers stole data in recent security breachbleepingcomputer.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 15 |
Same campaign
Other breaches at Grubhub
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Grubhub breach via third-party support provider exposes users' dataFeb 3, 20251 year agoVendor breachUnverified | Feb 3, 20251 year ago | Vendor breach | Retail | Unverified | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.