American Craft Beer The Best Craft Beer, Breweries, Bars, Brewpubs, Beer Stores, And Restaurants Serving Serious Beer.
Drizly, the alcohol delivery app which has become a way of life for many in the wake of COVID-19, got seriously hacked by an “unauthorized party,” last week who got away with a treasure trove of user data.
In a statement to American Craft Beer, the ecommerce platform which in over 100 markets across the US and Canada, said it first discovered it had been hacked on July 13 and immediately “took steps to tighten security and further reduce risk of attack.”
“Email address, phone number and birthdate data was obtained and delivery address information was included in a small fraction, under 2%, of the records,” the company said…
“It’s critical to point out that, with 100% certainty, no financial information — from neither credit nor debit cards — was compromised. Hashed passwords were taken, though since we use BCrypt, an industry favored hashing algorithm, to encrypt the passwords, Drizly accounts should not be able to be accessed.”
And while Drizly users can take some comfort in the company’s certainty that their credit and debit cards weren’t compromised, losing email addresses, birthdays, encrypted passwords, and even delivery addresses is a lot of valuable info, especially in the wrong hands.
But wait…there’s more.
TechCrunch‘s own investigation discovered that Drizly customers’ phone numbers, IP addresses, and geolocation data were also compromised in the breach.
And in spite of Drizly’s assertion that customers’ financial details were safe, TechCrunch uncovered a February dark web listing for a “fresh hacked” Drizly account claiming to include credit card details…so there’s that.
With much of the nation “sheltering-in-place” and many transitioning online delivery services like Drizly, this hack came at an opportune time.
“New customers account for approximately 40% of current orders and new buyer sales remain up 1200% year-over-year,” according to Forbes. “The platform has seen record sales since the pandemic started —the week of April 13, sales were a whopping 535% over baseline.”
As many as 2.5 million Drizly accounts are believed to have been stolen in the breach…ouch.
And while we’re on the subject, there’s also these…
