PHP Vulnerability Responses by Company

DoorDash, Inc.

Companies / web services
Aliases / services
ドアダッシュ / DoorDash / DoorDash, Inc.
Official website
https://www.doordash.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

order and delivery-partner contact data

Response status
Not listed
Response information checked
2026-10-29

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-29

Vendor phishing exposed internal tools and some customer contact, delivery/order and Dasher contact data. Password/full-card theft was not identified; Wolt was excluded from the incident scope.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Avoid replying to suspicious requests or opening their attachments/links; verify through official support.

Official service URL

Source URLs

  1. 2022-08-25 official security noticehttps://help.doordash.com/en-us/dashers/article/how-we-re-responding-to-a-third-party-vendor-phishing-incident-dxService and operation documentation
  2. 2022 DoorDash breach-notification decisionhttps://oipc.ab.ca/wp-content/uploads/2022/10/P2022-ND-058.pdfService and operation documentation
Related official sources
  1. Operator and official informationOfficial information directoryIdentifies DoorDash, Inc. and the relevant service scope.
  2. 2022-08-25 official security noticeOfficial notice; link to this PHP incident unconfirmedVendor phishing exposed internal tools and some customer contact, delivery/order and Dasher contact data.
  3. 2022 DoorDash breach-notification decisionOfficial notice; link to this PHP incident unconfirmedConfirms access through vendor accounts and individual notices on August 25, 2022.
  4. 2022 DoorDash breach-notification decisionOfficial notice; link to this PHP incident unconfirmedConfirms access through vendor accounts and individual notices on August 25, 2022.

Comments