HungerRush claimed customer data exposure
Data Leak
Summary
Hide ▲
Show ▼
A threat actor claimed HungerRush customer records were exposed, creating extortion risk for millions of customers and their personal and payment data. The claim surfaced in early Wednesday morning emails sent to restaurant patrons, which warned that the information could be misused if the company did not respond. The alleged dataset includes names, emails, passwords, addresses, phone numbers, dates of birth, and credit card information. The exposure remains unconfirmed, but the messages are explicit about the claimed leak and the sensitivity of the data.
Related Happenings
HungerRush extortion email campaign targeting restaurant patrons
Campaign
First: 04.03.2026 20:44
Last: 04.03.2026 20:44
Sources 1
How related:
The attacker started sending the emails early Wednesday morning, with multiple recipients sharing samples with BleepingComputer.
About this happening:
A **HungerRush** extortion email operation started reaching **restaurant patrons** early Wednesday morning, raising the risk that **restaurant and customer data** could be exposed...
HungerRush extortion email campaign targeting restaurant patrons
CampaignHow related: The attacker started sending the emails early Wednesday morning, with multiple recipients sharing samples with BleepingComputer.
About this happening: A **HungerRush** extortion email operation started reaching **restaurant patrons** early Wednesday morning, raising the risk that **restaurant and customer data** could be exposed...
Timeline
-
04.03.2026 20:44 1 articles · 2mo ago
HungerRush extortion emails claim customer data exposure
Initial DisclosureRestaurant patrons using HungerRush-linked ordering or POS systems received extortion emails from [email protected] and, three hours later, from [email protected], with the sender warning that restaurant and customer data could be exposed unless HungerRush responded and claiming access to records for millions of customers containing names, emails, passwords, addresses, phone numbers, dates of birth, and credit card information.
Show sources
- Hacker mass-mails HungerRush extortion emails to restaurant patrons — www.bleepingcomputer.com — 04.03.2026 20:44
-
04.03.2026 20:44 2 articles · 2mo ago
HungerRush email headers point to Twilio SendGrid delivery
Detection Ioc UpdateThe messages were delivered from o10.e.hungerrush.com (159.183.129.119) through Twilio SendGrid and passed SPF, DKIM, and DMARC for hungerrush.com because the domain's SPF record authorizes SendGrid to send mail on its behalf.
Show sources
- Hacker mass-mails HungerRush extortion emails to restaurant patrons — www.bleepingcomputer.com — 04.03.2026 20:44
- Hacker mass-mails HungerRush extortion emails to restaurant patrons — www.bleepingcomputer.com — 04.03.2026 20:44