Breach Disclosure: Foodora

The online food delivery service, Delivery Hero, has confirmed a breach impacting its Foodora brand. The breach contains data from 14 countries including personal details for 727,000 accounts, which contained names, addresses, phone numbers, hashed passwords, and coordinates of users.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

This breach contains data all the way back from 2016, and from multiple countries which Foodora operated, including United Arab Emirates, Singapore, Germany, Spain, France, Liechtenstein, Italy, Austria, Hong Kong, the Netherlands, Canada, Sweden, Norway and Australia.

The breach contained multiple SQL files, broken up by countries, and included a Customer Address file, along with a Customer file. Luckily the passwords contained in the breached data were hashed using bcrypt, however, there were some MD5 hashes contained in the data, which could potentially be cracked relatively quicker than other hashing methods.

Delivery Hero has acknowledged the data breach, however, stated they do not currently know how this breach occurred.

Figure 1: Breach listing on RaidForums