GrubHub experienced a severe security incident where approximately 70 million lines of data were compromised from nearly 17 million accounts. The stolen data included names, emails, and passwords encrypted with SHA1. The breach, which GrubHub disclosed alongside a third-party breach, also exposed contact details and partial payment information. Although no full financial details were compromised, the incident could still enable account infiltrations and fraudulent activities. Threat actors aim to use the data for phishing, scams, and identity theft, along with credential stuffing attacks on other platforms.
Source: https://www.scworld.com/brief/grubhub-breach-purportedly-impacts-almost-17m
"id": "lif836041125",
"linkid": "life",
"type": "Breach",
"date": "4/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"