San Francisco, Aug 26 : The online delivery company DoorDash has announced that it was affected by a data breach that has affected a variety of clients and retailers.The company has said that it was recently aware that an unrelated vendor was the victim of an elaborate phishing attack and that personal information stored by DoorDash was compromised.
“Importantly the phishing attack didn’t compromise any sensitive data We have no reason to believe any affected personal information was used to commit identity theft or fraud at the moment,” the company said in an article on its blog.
“Because we appreciate the trust that our customers have in us, we’re providing an update on what has transpired and how we’re reacting,” it added.
DoorDash recently discovered suspicious and suspicious activity on the computer network of a third-party vendor.In the ensuing response, it immediately removed the vendor’s access our system and halted the incident.
“Based the results of our investigation, we found the vendor was hacked by an elaborate phishing attack.The attacker used the credentials stolen of employees of the vendor to gain access to a number of the internal systems,” the company said.
“The sophisticated tactics employed appear to be linked to a larger phishing campaign that has targeted a variety of other businesses.We are aware that law enforcement agencies are conscious of this scheme and currently investigating.
We have reached out to them to offer our assistance,” it added.
The company stated that the investigation has revealed that a tiny percentage of people whose personal information is managed by DoorDash was affected in connection with this incident.
vc/