Hackers Stole the Data of 4.9 million DoorDash Users. Here's How to Tell If You Were Affected.

Hackers stole information including names, delivery addresses, contact information, and some credit card information.
Hackers Stole the Data of 4.9 million DoorDash Users. Here's How to Tell If You Were Affected.
Image credit: Smith Collection | Gado | Getty Images
2 min read
This story originally appeared on Business Insider

Delivery service DoorDash suffered a data breach earlier this year that affected the information of 4.9 million users, delivery workers, and restaurants, DoorDash announced Thursday afternoon.

The breach occurred on May 4 and affects people who started using the app before April 5, 2018. 

As a result of the breach, an unauthorized third party was able to gain access to users' profile information, including names, email addresses, delivery addresses, order history, and phone numbers.

Related: For the Average Hacker, Your Small Business Is an Ideal Target

The last four digits of some consumers' credit cards were also accessed, but not full card numbers or CVVs. For some delivery workers and restaurants, the unauthorized third party accessed the last four digits of bank account numbers. This credit card and banking information is not sufficient to make fraudulent charges or withdrawals, according to DoorDash.

DoorDash recently surpassed Uber Eats to become the second-largest food delivery service in the US after GrubHub, the parent company of Seamless and Eat24, according to Quartz. It is valued between $6 billion and $7 billion.

Related: Reddit Hacked, Despite SMS Two-Factor Authentication

Months before the data breach was announced, the food delivery app drew controversy over its decision to use tips to subsidize delivery workers' wages, rather than giving tips directly to workers. DoorDash has since announced changes to its tipping policy.

Am I affected by the DoorDash data breach?

DoorDash said it has begun contacting people affected by the data breach and will continue to do so in the coming days.

Anyone who joined DoorDash after April 5, 2018 is not affected and can rule themselves out as a potential victim of the breach.

Related: Why We Need to Worry More Than Ever About Getting Hacked

Even if you haven't been contacted by DoorDash regarding the breach, the app recommends that all users change their password immediately to be safe.

If you have questions for DoorDash about the breach, the company has also set up a help line that can be reached at 855-646-4683.

Read DoorDash's full statement on the breach here.

More from Entrepreneur

Get heaping discounts to books you love delivered straight to your inbox. We’ll feature a different book each week and share exclusive deals you won’t find anywhere else.
Jumpstart Your Business. Entrepreneur Insider is your all-access pass to the skills, experts, and network you need to get your business off the ground—or take it to the next level.
Create your business plan in half the time with twice the impact using Entrepreneur's BIZ PLANNING PLUS powered by LivePlan. Try risk free for 60 days.

Latest on Entrepreneur