‼️🇧🇷 Brazilian Food-Delivery Giant iFood Targeted in Alleged 43.8M-Record Customer Data Extorti...
iFood Brazil targeted in alleged extortion involving 43.8M customer records.
Run iFood (Delivery Hero subsidiary)?
Get an email when a reviewed story names iFood (Delivery Hero subsidiary), usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Brazilian food-delivery company iFood has been targeted in an alleged data extortion scheme involving approximately 43.8 million customer records. Threat actors are reportedly demanding payment in exchange for not publicly releasing or selling the stolen data. The incident highlights ongoing targeting of major Latin American digital services platforms.
The lesson from this incident
Full lessoniFood fell victim to a massive data extortion scheme affecting 43.8 million customer records, demonstrating the critical importance of protecting customer data at scale. The attackers are demanding payment to prevent public release or sale of the stolen information, following a common ransomware-adjacent playbook. This incident highlights how food delivery platforms have become high-value targets due to their vast databases of personal information including names, addresses, payment details, and behavioral patterns. Organizations handling large volumes of personal data must implement robust data protection measures and prepare for extortion scenarios where attackers threaten data exposure rather than system encryption.
What helps against this
How we list vendors- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
Indicators of Compromise
- malware — Data extortion campaign