Breach Disclosure: EatStreet

Breach Disclosure: Eatstreet

EatStreet, a food ordering delivery service, was breached in June 2019. Databases were stolen containing both customer and partner details. Leaked information includes names, phone numbers, bank account and routing numbers, as well as email and home addresses for delivery customers. Credit card information including card verification code may also have been accessed.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• Remain alert to potential spear phishing attacks through email and social media.

Details

Six million users supposedly had financial and personal information breached in yet another attack conducted by breach dump seller gnosticplayers. Although EatStreet has not confirmed this number, the hacker claimed this was the case in a private interview with tech media company ZDNet. EatStreet reports that they have increased security protocols in light of the attack.