Dodo Pizza confirms cyberattack, customer data potentially compromised

Cyberattack Confirmed by Dodo Pizza

Dodo Pizza, a Russian fast-food chain with approximately 1,500 locations across 28 countries, announced on Monday that its systems were breached in a cyberattack. The company stated that the attackers gained access to some customer personal information.

Compromised Data and Company Response

The potentially compromised data includes customer names, addresses, email addresses, phone numbers, dates of birth, and order details. Dodo Pizza clarified that payment information was not stored on its systems and therefore was not affected. The company has blocked the attackers' access, initiated an internal investigation, and notified the Russian communications regulator Roskomnadzor.

Hacker Group Claims Responsibility

A hacking group identifying itself as DataSuckers claimed responsibility for the attack via its Telegram channel. The group asserted that it obtained records belonging to 68 million customers and 15 years of order history. These claims could not be independently verified, and Dodo Pizza did not specify the number of affected customers. DataSuckers indicated plans to publish some of the stolen data and offered to sell the database for approximately $100,000.

Attacker Motivation and Previous Incidents

DataSuckers describes itself as financially motivated rather than politically. The group uses its Telegram channel to detail its intrusions and invites contact from victims, journalists, and law enforcement. Earlier this month, DataSuckers also claimed responsibility for an attack on Tez Tour, a major Russian tour operator, where they allegedly spent two weeks in the systems and stole customer information, though Tez Tour only confirmed website disruption.