DoorDash says customers, dashers affected by recent data breach

DoorDash confirmed a data breach that exposed the names, email addresses, phone numbers and physical addresses of some of its users, including customers, dashers and merchants.

In a Help Center article published Nov. 13, DoorDash said that although hackers stole personal information from users, “no sensitive information was accessed by the unauthorized third party,” and the company has “no indication the data has been misused for fraud or identity theft at this time.”

“No sensitive information, such as Social Security numbers or other government-issued identification numbers, driver’s license information, or bank or payment card information, was accessed,” DoorDash said in a statement to USA TODAY.

Additionally, the company said that the data breach affected customers, dashers and merchants. The food delivery service did not specify how many users’ data was breached, but said they’ve notified those impacted.

The data breach stems from a DoorDash employee falling victim to a “social engineering scam,” according to the company.

“The response team identified the incident, shut down the unauthorized party’s access, started an investigation, and referred the matter to law enforcement,” DoorDash said.

What should those affected by the DoorDash data breach do?

Customers, merchants and dashers affected by the data breach should have been contacted by DoorDash, the company said.

“DoorDash has directly notified affected users where required, published information about the incident on our website, and set up a dedicated call center to answer questions from users,” according to the company.

Although no personal information was misused, and no sensitive data was stolen, such as payment or bank account information, DoorDash said, “It is always a good idea to be cautious of unsolicited communications that ask for your personal information or refer you to a web page asking for personal information, and avoid clicking on links or downloading attachments from suspicious emails.”

Anyone with questions about the data breach can contact DoorDash’s dedicated call center, available in English and French, Monday to Friday from 6 a.m. to 8 p.m. PT and weekends from 8 a.m. to 5 p.m. PT at +1-833-918-8030 (toll-free) for U.S. and Canada and +1-214-393-3293 for international callers. Please use engagement number B155060 when calling, according to the company.

What is DoorDash doing to prevent another data breach?

Following this incident, DoorDash said it had implemented steps to prevent future data breaches. Among the new measures, the company said it would be training employees to prevent them from falling victim to future social engineering scams.

“We are committed to protecting your privacy and have already increased training for our employees to help prevent social engineering scams, deployed new improvements to our security systems, enlisted the support of an external firm for specialized support, and referred the matter to law enforcement to help prevent events like this from happening again,” the company said.

Fernando Cervantes Jr. is a trending news reporter for USA TODAY. Reach him at fernando.cervantes@gannett.com and follow him on X @fern_cerv_.