Data Breaches & Leaks The Record 2 weeks ago

Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Data Breaches & Leaks

Analyst Takeaway

"Image: Dodo Pizza (CC BY-SA 2.0) Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims Hackers breached the systems of popular Russian fast-food chain Dodo Pizza and gained access to some customers’ personal information, the company said Monday. According to Dodo Pizza, the potentially compromised information included customers’ names, addresses, email addresses,..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
dodo pizza
Image: Dodo Pizza (CC BY-SA 2.0)

Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims

Hackers breached the systems of popular Russian fast-food chain Dodo Pizza and gained access to some customers’ personal information, the company said Monday.

According to Dodo Pizza, the potentially compromised information included customers’ names, addresses, email addresses, phone numbers, dates of birth and order details. The company said it does not store customers’ payment information and that payment data was therefore not compromised.

“The attackers’ access has been blocked, and an internal investigation is ongoing,” Dodo Pizza said, adding that it had notified Russian communications regulator Roskomnadzor about the incident.

The company operates around 1,500 pizza restaurants across 28 countries. Its Russian business reported about $120 million in revenue this month, according to figures published on the company’s website.

A hacking group calling itself DataSuckers claimed responsibility for the attack, saying on its Telegram channel that it had gained access to Dodo Pizza’s databases.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →