Grubhub Data Breach: Customer and Driver Information Exposed in Third-Party Incident

Grubhub has disclosed a security breach affecting personal data of both customers and drivers, following unauthorized access by an individual through a third-party contractor's account. The compromised information includes names, email addresses, phone numbers, and partial credit card numbers. Grubhub states that only a limited subset was impacted. In response to the incident, the company has taken several measures: engaging forensic experts for investigation, rotating passwords to strengthen credential security, and enhancing monitoring with additional anomaly detection mechanisms. However, no identity theft protection services have been offered to those affected.