Alcohol Delivery Service Drizly Confirms Data Breach

An anonymous reader quotes a report from TechCrunch: Online alcohol delivery startup Drizly has told customers that it was hit by a data breach. In an email to customers obtained by TechCrunch, the company said that a hacker "obtained" some customer data. The hacker took customer email addresses, date-of-birth, hashed passwords, and in some cases delivery addresses, the email read. Some 2.4 million Drizly accounts are believed to have been stolen. TechCrunch obtained a portion of the data, including several accounts of Drizly staff members. We verified the data against public records. The portion of data we obtained also contains user phone numbers, IP addresses, and geolocation data associated with the user's billing address.

Drizly did not say when the hack occurred or how many accounts were affected, but did advise users to change their passwords. The company said that no financial data was taken in the breach. But a listing on a dark web marketplace from a well-known seller of stolen data claims otherwise. The listing, which we are not linking to, claims to have "fresh hacked" [sic] Drizly accounts. The data is on sale for $14, at the time of writing . The seller did not say when the breach took place, but the listing appears to have been posted on February 13. Although no sample of data was offered, the listing claims to have valid Drizly credit card numbers and users' order history.

Read more of this story at Slashdot.