Hackers who breached grocery service Weee! leak details of over 11 million orders online

Details of over 11 million orders from US-based grocery delivery platform Weee! Were leaked on the cybercriminal-operated BreachedForums last week.

According to a data broker called ‘IntelBroker,’ the food delivery service was breached this month, exposing over 1.1 million unique email addresses and order details including customer names, phone numbers and even delivery notes for couriers that include residential or office building access codes.

“In approximately February 2023, the Asian and Hispanic food delivery service Weee! suffered a data breach,” the ad reads. “The attack led to the exposure of data including Full names, Email addresses, Phone numbers, Device types and Order notes (Where to leave the Order, Apartment codes etc.). In total 11.3 million orders were affected and 1,117,405 unique Email addresses were present in the data.”

Weee! has also acknowledged the breach, stating that only customers who placed an order between July 2021 and July 2022 were impacted, and no payment data was exposed.

“We have recently experienced a data breach that impacted some customer information,” the data breach notification reads. “We can confirm that no customer payment data was exposed as Weee! does not retain any customer payment information in our databases.”

“For customers that placed an order between July 12, 2021 and July 12, 2022, information such as name, address, email address, phone number, order number, and order comments may have been impacted,” the company said. “We will be notifying all impacted customers individually if their information was exposed.”

Cybercriminals can leverage the stolen data to defraud customers in targeted phishing campaigns delivered via email, phone or text. In more frightening cases, the malicious individuals could also exploit the delivery information to track customers’ whereabouts and habits and break into their homes.

Don’t let cybercrooks have the advantage when it comes to your digital identity.

Use Bitdefender Identity Theft Protection (US only) to stay in the know and limit financial losses associated with data breaches and identity crimes.

The one-stop credit monitoring and identity theft protection service helps you tackle threats to your identity and financial wellbeing with:

• 24/7 identity monitoring to detect if your personal information is on the dark web and to check for change-of-address requests, attempts to take over accounts, and court records that may show crimes falsely reported in your name
• An easy way to view your credit score or order a credit freeze in case of compromise
• Identity restoration services with a 100% success rate, plus access to your dedicated resolution specialist
• Up to $2 million identity theft recovery plan, plus many more benefits, depending on your chosen plan