Dodo Pizza confirms breach after DataSuckers claims customer data theft

Dodo Pizza, a Russian fast-food chain with around 1,500 restaurants across 28 countries, has confirmed that hackers breached its systems and accessed customer personal information. The company said the data potentially exposed includes names, addresses, email addresses, phone numbers, dates of birth and order details.

Dodo Pizza said it does not store payment information, so payment data was not compromised. The company said attackers’ access has been blocked, an internal investigation is ongoing, and it has notified Russian communications regulator Roskomnadzor.

A hacking group calling itself DataSuckers claimed responsibility, saying on Telegram it obtained records belonging to 68 million customers across multiple countries and 15 years of order history. The claims could not be independently verified, and Dodo Pizza did not say how many customers were affected. DataSuckers said it planned to publish some of the data and offered to sell the database for about $100,000.

The group describes itself as financially motivated and earlier this month claimed responsibility for an attack on Russian tour operator Tez Tour, whose website was defaced. DataSuckers said it sold data stolen from Tez Tour for $10,000, claims that have also not been independently verified.