DoorDash confirms that the data breach affects users’ phone numbers and physical addresses

DoorDash disclosed a data breach that exposed the personal information of an unspecified number of users, which included names, email addresses, phone numbers and physical addresses.

Despite the fact that hackers stole phone numbers and physical addresses, DoorDash said that “no sensitive information was accessed by an unauthorized third party and we have no indication of data being misused for fraud or identity theft at this time.”

DoorDash said in the post that the breach affected a mix of customers, delivery workers and merchants. The company did not respond to a request for comment, which included a question about exactly how many users were victims of the hack.

The breach arose from an employee falling victim to a social engineering attack. When the company identified the breach, it closed off the hackers’ access to its systems, began an investigation, and reported the incident to law enforcement, according to a post the company published last week.

DoorDash said no “Social Security numbers, other government-issued identification numbers, driver’s license information, or bank or payment card information” were stolen as part of the breach.

The company said it has notified affected users.