Privacy Unpacked
Menu

Confirmed breach

DoorDash data breach

Country being checked · doordash.com

A breach of DoorDash was added to Have I Been Pwned’s breach database on 7 January 2023. It affected 367,476 accounts. Exposed: Financial account and card details, Email addresses, Names and Geographic locations. The breach began on 2 August 2022, 158 days before it was reported.

If DoorDash had your data

  1. Look for DoorDash’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
  3. Expect scams that use your details: calls, texts or emails pretending to be DoorDash, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

Earlier breaches at DoorDash

From the official registers’ and Have I Been Pwned’s full histories. A name match: check the notice to be sure it is the same company.

  1. California Attorney General · began 4 May 2019
  2. Washington Attorney General · 2,243 Washington residents

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.