Online startup for the delivery of alcohol Drizly has informed customers that it is affected by a data breach.
In an email to customers received from theinformationsuperhighway, the company said that a hacker “received” some customer data. The hacker received customer email addresses, date of birth, hashed passwords and, in some cases, the delivery address of the email read.
Drizly didn't say when the hack occurred or how many accounts were affected, but advised users to change their passwords. We asked the company for a comment, but we didn't get an immediate response.
The company said no financial data was taken in the breach. But a listing on a dark web marketplace by a well-known seller of stolen data claims otherwise.
The listing was published in February 2020. (Screenshot: theinformationsuperhighway)
The listing, which we don't link to, claims to have "freshly hacked" (sic) Drizly accounts. The seller has not indicated when the violation occurred, but the listing appears to have been published on February 13. The list also did not indicate how many accounts were for sale. Although no sample of data was offered, the listing claims to have valid Drizly credit cad numbers and user order history.
The data is for sale for $ 14, the listing says. theinformationsuperhighway has questions for the seller.
Drizly has grown to be one of the largest online alcohol delivery services in the U.S. and Canada, and has raised over $ 68 million to date to compete with Minibar and Delivery.com.
Send tips securely via Signal and WhatsApp to +1 646-755-8849 or send an email to: zack.whittaker@protonmail.com