iFood Confirms Data Breach Affecting 1.2 Million Users in Brazil

iFood disclosed a December 2025 data breach affecting about 1.2 million users (names, phone numbers, addresses, CPF numbers). The company says no passwords or payment details were exposed; however, an attacker on BreachForums claimed a separate, larger theft of ~43.8M records and demanded ransom, creating uncertainty and potential identity-fraud and regulatory ramifications under Brazil’s LGPD.