HungerRush Breach Allegedly Exposes Data on 28 Million Customers

Summary
A cybercrime-forum seller is offering a database allegedly taken from HungerRush, purportedly containing records on more than 28 million customers and restaurant businesses. The breach and data claims are unverified.
Key points
- A seller on a cybercrime forum is offering the database in a one-time sale; the article does not independently verify the alleged breach.
- The database purportedly contains information on more than 28 million customers and associated restaurant businesses.
- Reported customer data includes names, physical addresses, phone numbers, email addresses, and dates of birth.
- Business-related records reportedly include restaurant names and descriptions, domain names and links, internal identifiers, and timestamps.
- The article says the alleged data exposure could increase risks of identity theft, targeted phishing, and operational impacts.
Article Details
- Victim Organization
- HungerRush
- Incident Type
- Alleged data breach; a seller reportedly offered a database attributed to HungerRush for sale.
- Data Types Exposed
- Full names
- Physical addresses
- Phone numbers, including Twilio numbers and fax numbers
- Email addresses
- Dates of birth
- Restaurant business names and descriptions
- Domain names and URLs, including order and survey links
- Internal identifiers and system timestamps
- Affected Records
- A seller purportedly claims the database contains information on more than 28 million customers and associated restaurant businesses.
- Operational Impact
- No operational disruption is reported. The article describes potential identity-theft and targeted-phishing risks for customers and restaurants.
- Ransom Or Extortion
- A seller reportedly offered the database for a one-time sale; no ransom demand or direct extortion of HungerRush is reported.
- Claim Status
- claimed
