Breaches and incidentsBriefReported by a reputable outlet, citing the company
Grubhub: data downloaded from Grubhub systems, sources tie it to Salesloft Drift secrets
Grubhub said “unauthorized individuals ... recently downloaded data from certain Grubhub systems” and that “Sensitive information, such as financial...
- Disclosed
What happened
- Grubhub said “unauthorized individuals ... recently downloaded data from certain Grubhub systems” and that “Sensitive information, such as financial information or order history, was not affected.” It did not say whether customer data was involved.
- Root cause per BleepingComputer’s sources (unconfirmed by Grubhub): secrets or credentials stolen in the August 2025 Salesloft Drift campaign, leading to Zendesk support data; older Salesforce data from a February 2025 breach is also being used for extortion.
- Sources identify ShinyHunters as the extorting party; the group declined comment.
- Activity stopped, third-party firm hired, law enforcement notified.
Sources
- https://www.bleepingcomputer.com/news/security/grubhub-confirms-hackers-stole-data-in-recent-security-breach/
- https://www.privacyguides.org/news/2026/01/16/data-breach-roundup-jan-9-jan-15-2026/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.