DoorDash service got affected by a major data leak – 4.9 million customers, employees and the company’s independent contractors had their personal data compromised.

The data, including names, order history and addresses, phone numbers, as well as the clients’ credit cards’ last four digits, was exposed by a third-party service provider on May 4. About 100,000 delivery drivers had their license numbers leaked.

The breach concerns those who joined the platform before April 5, 2018. The company has discovered the breach this month. The unauthorised user was detected and eliminated.

DoorDash is now consulted by an outside security expert in order to prevent the business from potential threats.