New York (The Verge) — Instacart users’ personal data, including order history, is reportedly being sold online theverge.com/2020/7/23/2133….
Personal data belonging to hundreds of thousands of Instacart users is being sold online on the dark web, according to a report from BuzzFeed. Instacart denies that there has been a data breach at the site, but says accounts can be breached by phishing and credential stuffing attacks. Instacart says it’s investigating the issue
The publication says information including “names, the last four digits of credit card numbers, and order histories” appearing to belong to 278,531 Instacart accounts is available to buy. (Though it’s impossible to verify that this number doesn’t include duplicates or incorrect data.) BuzzFeed did confirm with two Instacart users that the order date, transaction amount, and credit card numbers included in the cache matched their recent purchases. The data also includes users’ emails addresses. — James Vincent/@verge