Bleepingcomputer

DoorDash Data Breach Exposes Customer Information Due to Social Engineering Attack

First seen 1 Dec 2025, 16:44 UTC • •40.2

Article Content

1 / 2

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

DoorDash confirmed a data breach on October 25, 2025, where an unauthorized third party accessed personal information of customers, delivery workers, and merchants. The breach was caused by an employee falling victim to a social engineering scam, compromising names, email addresses, phone numbers, and physical addresses, but no sensitive financial information was accessed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 241d ago How this analysis works

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Data Breach
Phishing

Organization (3)

Harvard University
Princeton University
University of Pennsylvania

Affected Platform (1)

Oracle E-business Suite

Relationships

Data Breach targets Oracle E-business Suite
Phishing targets Oracle E-business Suite
Data Breach related to Harvard University
Data Breach related to Princeton University
Data Breach related to University of Pennsylvania

Following this threat?

Track Harvard University in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

DoorDash Data Breach Exposes Customer Information Due to Social Engineering Attack

Article Content

More articles in this cluster (1)

Threat Graph

Following this threat?

Extracted Entities (6)

Attack Types (2)

Companies (3)

Platforms (1)