Grubhub confirms hackers stole data in recent security breach

Grubhub confirmed unauthorized individuals downloaded data from certain systems and sources told BleepingComputer that the ShinyHunters group is extorting the company, demanding Bitcoin to prevent release of older Salesforce records and newer Zendesk data; Grubhub says no financial information or order history were affected, is working with a third-party cybersecurity firm, and has notified law enforcement. The report links the breach to credential/secrets theft tied to the Salesloft/Drift incidents that have been used to harvest access tokens and secrets for follow-on attacks.