Grubhub has suffered yet another data breach and is facing an extortion demand from the hackers, Bleeping Computer reports.
In February 2025, data from the food delivery platform was stolen as part of a large-scale Salesforce security breach. That attack was carried out by a group called ShinyHunters, and sources tell Bleeping Computer that the same group is behind the latest leak involving Grubhub’s Zendesk data.
Grubhub uses Zendesk to run its online chat for customer complaints and account issues, and credentials stolen in a recent attack on Salesforce’s Drift app helped ShinyHunters breach the system, the report adds.
The food delivery service has yet to reveal the total number of users affected or the types of data stolen in the recent attack. It has, however, confirmed that it is working with a third-party cybersecurity firm to strengthen its systems and has reported the incident to law enforcement.
“We’re aware of unauthorized individuals who recently downloaded data from certain Grubhub systems,” a company spokesperson tells Bleeping Computer. “We quickly investigated, stopped the activity, and are taking steps to further increase our security posture. Sensitive information, such as financial information or order history, was not affected.”
Recommended by Our Editors
ShinyHunters is also extorting Grubhub, according to Bleeping Computer. The hackers have demanded payment in Bitcoin to stop data from the two breaches from appearing on the dark web.
The hacking group was in the headlines throughout 2025. In October, they threatened to leak a billion records they stole from over 39 companies with the help of two other gangs. Google warned about ShinyHunters in June and notified users that the group had hacked it weeks later.
Get Our Best Stories!
Stay Safe With the Latest Security News and Updates
By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy
Policy.
Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
About Our Expert
Experience
Jibin is a tech news writer based out of Ahmedabad, India. Previously, he served as the editor of iGeeksBlog and is a self-proclaimed tech enthusiast who loves breaking down complex information for a broader audience.
Read Full Bio
