DoorDash Discloses Data Breach of Contact Information

DoorDash, the popular food delivery platform, disclosed a data breach on October 25, 2025, that exposed personal contact information belonging to an unspecified number of customers, delivery drivers and merchants across its operating regions in the United States, Canada, Australia and New Zealand.

The incident stemmed from a social engineering attack in which an employee was tricked into providing unauthorized access to company systems, according to the company's notification to affected individuals. Once the breach was detected, DoorDash's response team immediately revoked the intruder's access, launched an internal investigation and notified law enforcement authorities. The company has also engaged a third-party cybersecurity firm to support the probe.

The compromised data included names, email addresses, phone numbers and physical addresses, though the exact details varied by individual. DoorDash emphasized that no sensitive information, such as Social Security numbers, other government-issued identification numbers, driver's license details or payment card data, was accessed. As of the disclosure, the company reported no evidence that the stolen information has been used for...