DoorDash confirms data breach affected 4.9M customers, workers and merchants

Re:DoorDash confirms data breach affected 4.9M customers, wo... by kilburn on Thursday September 26, 2019 @08:25PM (#21087206)

This is the part the is really missing.

I use [email protected] whenever I sign up at random sites. Last night I got a bunch of spams at the just-eat [1] account (food delivery, operating in 13 countries so not a small operation).

Now I know they've been breached, but:

1. They haven't reported it anywhere.

2. I don't know of any meaningful action I can take.

[1] https://en.wikipedia.org/wiki/Just_Eat

[ Parent | on HN ]

Re:DoorDash confirms data breach affected 4.9M customers, wo... by ipsi on Friday September 27, 2019 @04:24AM (#21089655)

They're headquartered in the UK, so I'd start with making a complaint via the Information Comissioner's Office: https://ico.org.uk/make-a-complaint/. The best option is probably "Your personal information concerns":

> If ... you’re concerned about how an organisation has handled your information – if the information is wrong, they have lost it or disclosed it to someone else – tell us.

[ Parent | on HN ]

Re:DoorDash confirms data breach affected 4.9M customers, wo... by jbkly7 on Friday September 27, 2019 @01:18AM (#21088682)

You could submit evidence of the breach to security researcher Troy Hunt at HaveIBeenPwned (https://haveibeenpwned.com/FAQs#SubmitBreach). He maintains a database of data breaches and people can sign up to be notified if their info appears in a new breach.

[ Parent | on HN ]

Re:DoorDash confirms data breach affected 4.9M customers, wo... by novok on Thursday September 26, 2019 @10:46PM (#21087954)

That would be an interesting project, create the breach-via-spam sensor network via accounts.

It also might not be a breach, but could of been sold via some sort marketing 'partnership'.

[ Parent | on HN ]