Get All Access for $5/mo

Report: Instacart Customer Data Is Being Sold on the Dark Web Instacart denies there has been a breach of its servers, so where is the personal data coming from?

By Matthew Humphries

This story originally appeared on PC Mag

Instagram via PC Mag

Grocery delivery and pick-up service Instacart is facing a major security dilemma today. The personal details of its customers are being sold on the dark web, but the company is denying its servers have been breached.

As BuzzFeed News reports, so far, 278,531 Instacart accounts were found to be for sale on the dark web, costing as little as $2 per customer. The information includes the customer name, email address, the last four digits of their credit cards, the order history for the account and some other shopping-related data. The validity of the account information has been verified by two Instacart customers whose details are up for sale, and this information is not old. The accounts being sold contain information from orders placed through June and up to July 22.

When BuzzFeed approached Instacart with the information, a spokesperson responded by saying, "We are not aware of any data breach at this time. We take data protection and privacy very seriously.... Outside of the Instacart platform, attackers may target individuals using phishing or credential stuffing techniques. In instances where we believe a customer's account may have been compromised through an external phishing scam outside of the Instacart platform or other action, we proactively communicate to our customers to auto-force them to update their password."

Instacart has millions of customers across the U.S. and Canada, so this counts as a relatively small breach of customer information. It may be that the details have been stolen from customers outside of the Instacart platform as the company hints at, but surely then there would be much more information for sale per account?

Related: Google Is Getting Into the Grocery Delivery Game

Any Instacart customers concerned about the security of their personal details can take the usual steps of changing their account password and enabling two-factor authentication if its available to you. If possible, I'd also remove the credit card associated with the account. Keeping your operating system up-to-date and using a good security suite for protection is also strongly advised. Hopefully, Instacart is investigating why hundreds of thousands of its customers are having their details sold and will release a statement including an explanation.

Matthew Humphries

Senior Editor

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Editor's Pick

Business Ideas

63 Small Business Ideas to Start in 2024

We put together a list of the best, most profitable small business ideas for entrepreneurs to pursue in 2024.

Franchise

Four Takeaways for the Franchise Industry From My Time at the Republican National Convention

Matt Haller, President and CEO of the IFA, says the stakes are high for franchisors and franchisees in the upcoming presidential election.

Business News

How to Build a Successful Startup, According to an Investor Who Made Early Bets on Twitter, Lyft, and Twitch

He's found a few patterns after nearly two decades of investing in startups.

Growing a Business

The Top 5 AI Tools That Can Revolutionize Your Workflow and Boost Productivity

Discover the top 5 AI tools for marketing and content creation that every marketer needs to know.

Marketing

10 Effective Growth Marketing Hacks and Strategies for Your Startup

Working at a startup can feel like building a plane while you're trying to take off. Use these ten marketing tips to effectively grow and sustain your startup.

Business News

Jake Paul Says He's 'Scared' to Fight Mike Tyson, But This Mindset Hack Helps Him 'Embrace' Fear and Make Millions: 'Let It Fuel You'

The social media star and "W" founder spoke to Entrepreneur about his latest ventures in boxing and business.