SevenRooms data breach: 1.2M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2023-08-24
In December 2022, over 400GB of data belonging to restaurant customer management platform SevenRooms was posted for sale to a popular hacking forum. The data included 1.2M unique email addresses alongside names and purchases. SevenRooms advised that the breach was due to unauthorised access of "a file transfer interface of a third-party vendor". Exposed data: email addresses, names, purchases. The breach dates from Dec 11, 2022; Have I Been Pwned loaded it on Aug 24, 2023.
What to do
- If you had a SevenRooms account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch