Story perspectives

Grubhub Faces Extortion After Data Breach by ShinyHunters

1/16/2026

Summary

Story summary

Grubhub confirmed a data breach in which unauthorized individuals accessed its systems and downloaded data.
Grubhub said sensitive customer financial information and order histories were not compromised.
The ShinyHunters group extorts Grubhub, demanding Bitcoin to prevent release of Zendesk and Salesforce records.
The breach is linked to compromised credentials from a third-party vendor stemming from Salesloft Drift attacks.
Grubhub is working with a cybersecurity firm and has notified law enforcement.

1 of 1

Story summary

Grubhub confirmed a data breach in which unauthorized individuals accessed its systems and downloaded data.
Grubhub said sensitive customer financial information and order histories were not compromised.
The ShinyHunters group extorts Grubhub, demanding Bitcoin to prevent release of Zendesk and Salesforce records.
The breach is linked to compromised credentials from a third-party vendor stemming from Salesloft Drift attacks.
Grubhub is working with a cybersecurity firm and has notified law enforcement.