“Dodo Pizza” reported a cyber attack and a possible leak of customer data

Dodo Pizza reported a cyber attack on its IT system. It happened on September 27 and 28. Attackers could gain access to the names, addresses, telephone numbers, email, dates of birth and orders of some customers. This is stated in the telegram channel of the company.

“We do not store payment data – they are safe,” the company said. The access of attackers is blocked, an internal check is conducted, the report says.

Dodo Pizza notified Roskomnadzor of the incident and warned that users could be “logged” to protect their accounts.

In March 2022, the data of Yandex.Food customers were publicly available. These included addresses, telephone numbers, email and order information. The company explained the actions of the employee. Roskomnadzor blocked the site with published data, and the service was fined 60 thousand rubles.

In May of the same year, Delivery Club reported the leak. The company said that the network got information about the orders of some users, but bank details among it was not. According to In4security, the database could contain 250 million lines, including names, addresses and order information.

Companies are required to report the incident to Roskomnadzor within 24 hours, and within 72 hours to send the results of the internal investigation and information about possible perpetrators. From May 30, 2025, a fine of 1 to 3% of annual revenue is provided for legal entities for repeated leakage, but not more than 500 million rubles.