Chowbus

Chowbus food delivery service data was breached in an attack by an unknown threat actor.

The attacker emailed the links to stolen data including both users and restaurants to all its customers.

The stolen data contained customer names, email addresses, phone numbers, and mailing addresses of about 803,350 Chowbus users and 4,300 restaurants.

The security team immediately took steps to resolve the issue.

Source: https://www.bleepingcomputer.com/news/security/chowbus-delivery-service-breached-hacker-emails-data-to-users/

TPRM report: https://scoringcyber.rankiteo.com/company/chowbus

"id": "cho20410222",
"linkid": "chowbus",
"type": "Breach",
"date": "10/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': ['803,350 users',
                                               '4,300 restaurants'],
                        'industry': 'Food and Beverage',
                        'name': 'Chowbus',
                        'type': 'Food Delivery Service'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': ['803,350 users',
                                               '4,300 restaurants'],
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Customer names',
                                              'Email addresses',
                                              'Phone numbers',
                                              'Mailing addresses']},
 'description': 'Chowbus food delivery service data was breached in an attack '
                'by an unknown threat actor. The attacker emailed the links to '
                'stolen data including both users and restaurants to all its '
                'customers. The stolen data contained customer names, email '
                'addresses, phone numbers, and mailing addresses of about '
                '803,350 Chowbus users and 4,300 restaurants. The security '
                'team immediately took steps to resolve the issue.',
 'impact': {'data_compromised': ['Customer names',
                                 'Email addresses',
                                 'Phone numbers',
                                 'Mailing addresses']},
 'response': {'remediation_measures': 'Immediate steps taken by the security '
                                      'team to resolve the issue'},
 'threat_actor': 'Unknown',
 'title': 'Chowbus Food Delivery Service Data Breach',
 'type': 'Data Breach'}