A hacker has reportedly obtained information on up to 2.5m users of the US online alcohol delivery service Drizly.
The data includes customer email addresses, date of birth, hashed passwords and, in some cases, delivery address.
“In terms of scale, up to 2.5 million accounts have been affected,” a company spokesperson was quoted as saying by technology sector journal TechCrunch. “Delivery address was included in under 2% of the records.
Drizly has advised users of its smartphone app-based service to change their passwords.
The company says no financial information was compromised.
When the data breach occurred is unknown, but TechCrunch refers to a listing on a dark web marketplace “from a well-known seller of stolen data” being posted last February.
Catch the replays and discover the best talks from Last Thursday in Privacy, addressing data protection, privacy and security challenges including working from home, COVID-19, global regulations and more. Visit https://digital.privsec.info/.
We have been awarded the number 1 GDPR Blog in 2019 by Feedspot.