DoorDash confirms data breach impacting user phone numbers, addresses

In a post on its website, DoorDash (DASH) said, “Our team recently identified and shut down a cybersecurity incident that involved an unauthorized third party gaining access to and taking certain user information. Importantly, no sensitive information was accessed by the unauthorized third party and we have no indication the data has been misused for fraud or identity theft at this time…A DoorDash employee was recently targeted in a social engineering scam. The response team identified the incident, shut down the unauthorized party’s access, started an investigation, and referred the matter to law enforcement…Our investigation has determined that some users whose data is maintained by DoorDash were affected in connection with this incident…The personal information accessed varied by individual and may have included: First and last name; Phone number; Email address; Physical address.”