According to an August 30th internet posting, DoorDash advised customers, contractors and delivery drivers of a phishing attack on a third-party vendor. According to the Company, the breached data consists of names, e-mail addresses and phone numbers but not financial information or social security numbers.
DoorDash has reported the hack to law enforcement and is taking steps to prevent a recurrence. The company considers that only a “small percentage” of its customers and delivery drivers were compromised, although targeted companies reporting intrusions generally are unaware of the extent of damage until a detailed forensic analysis has been performed.