HACKER MASS-MAILS HUNGERRUSH EXTORTION EMAILS TO RESTAURANT PATRONS

Summary from the TLDR InfoSec newsletter

A hacker has started emailing customers of restaurants that use the HungerRush point-of-sale platform, informing them that their data was compromised and that HungerRush is ignoring their demands. Alon Gal, CTO of Hudson Rock, posted that infostealer logs show a HungerRush employee's device was hacked, which enabled the attacker to move laterally within the environment. However, HungerRush says that a third-party vendor's compromised credentials were used to access its email marketing account. The attacker claims to have data records for millions of customers containing names, emails, passwords, addresses, phone numbers, dates of birth, and credit card information. However, HungerRush disputes this, stating that no personal or financial information was stolen.