Some Users of InnerChef Had Info Hacked and Leaked

Siriam Sharma reports:

An anonymous hacker has been able to infiltrate food delivery startup InnerChef‘s servers, and has leaked a partial list of names, phone numbers, and email addresses used at registration to demonstrate the exploit.

Gadgets 360 confirmed the data breach by calling and verifying three of the phone numbers provided in the list by the hacker in an email. All the three users confirmed that they had used InnerChef’s food delivery service.

“InnerChef is an Indian startup that got funding but despite all that, their security sucks. This funded startup doesn’t care about customer data and only about money, growth, and orders,” the hacker wrote in the email, which disclosed the identities of 35 InnerChef users to demonstrate the breach.

Read more on Gadgets.

Update: A commenter submitted a comment with links to pastes with more data. As is this site’s policy, I won’t link to data dumps that expose personal info, but I will describe the pastes here, as summarized by the commenter:

• InnerChef.com Database leaked – 179 Order Details (Name, Email, Mobile, City, Order Amount)
• InnerChef.com Database leaked – 377 Google Plus user details (Name, Email)
• InnerChef.com Database leaked – 517 Facebook user details (Name, Email) (3 pages)