In the News
It might be time to check your food delivery accounts to ensure they utilize appropriate security measures. In DoorDash Customers Say their Accounts Have Been Hacked, Zack Whittaker at TechCrunch discusses recent customer complaints that their DoorDash accounts have been compromised and used for fraudulent purchases. Whittaker explains DoorDash believes that these compromises were the result of credential stuffing, which means that previously stolen log-in credentials were used on other accounts preying on those who reuse log-in credentials. Whittaker also states that DoorDash does not plan on updating its password policies, which currently does not have password complexity requirements or other like strong security measures.
Our Take
Food deliver services are all the rage given its convenience and quick delivery time frames. However, such platforms keep various amounts of your personal and financial information on hand in order to complete transactions quickly. This information, if stored securely, makes orders and processing run smoothly, but not all food delivery services have the same security policies in place for data and account protection. Having a strong password can make all the difference in whether or not your account is easily breached. The issue with utilizing the same password or a very simple password on accounts is the possibility of a malicious individual guessing your password or gaining access to multiple accounts with only one stolen password.
Recommendations
So how can you protect your personal information and finances when using mobile services?
- Refrain from choosing passwords that contain a simple word or phrase–create strong passwords and change them every so often – the longer the better.
- Make sure to change an account’s default password to a unique password
- User password databases such as LastPass or KeePass to keep track of accounts, rather than reusing the same passwords across accounts
- Do not make your passwords or security questions/answers out of information that can be found on your social media
- Stay up to date on news covering recent scams and breaches to see if you may have been affected