Domino's India data breach: 22.5M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2021-06-03
In April 2021, 13TB of compromised Domino's India appeared for sale on a hacking forum after which the company acknowledged a major data breach they dated back to March. The compromised data included 22.5 million unique email addresses, names, phone numbers, order histories and physical addresses. Exposed data: email addresses, names, phone numbers, physical addresses, purchases. The breach dates from Mar 24, 2021; Have I Been Pwned loaded it on Jun 3, 2021.
What to do
- If you had a Domino's India account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch