iMenu360 data breach: 3.4M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2023-08-17
In approximately late 2022, 3.4M customer records from iMenu360 ("The world's 1 most trusted online ordering platform") were exposed. The data appeared to be from ordering systems using the platform and contained email and physical addresses, latitudes and longitudes, names and phone numbers. Numerous attempts were made to contact iMenu360 about the incident between April and August 2023, but no response was received. Exposed data: email addresses, latitude and longitude pairs, names, phone numbers, physical addresses. The breach dates from Aug 11, 2022; Have I Been Pwned loaded it on Aug 17, 2023.
What to do
- If you had a iMenu360 account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
