Thieves order a tasty takeout of names and addresses from DoorDash

DoorDash disclosed a breach stemming from an employee-targeted social engineering attack that allowed access to user accounts and exposed names, phone numbers, email addresses, and physical addresses; the story also highlights a separate email-spoofing flaw in DoorDash for Business and criticises the company’s delayed notification and handling of disclosures.