> Deliveroo has blamed the breach on cybercriminals getting hold of login details “stolen from another service unrelated to our company in a major data breach”.

> Deliveroo has blamed the breach on cybercriminals getting hold of login details “stolen from another service unrelated to our company in a major data breach”. > This is despite the company not asking customers to enter a Card Verification Value 2 (CVV2) code when making orders, a card security system designed to ensure that someone ordering something online has physical possession of the card used to pay for it. More info on an article from November 2016: https://nakedsecurity.sophos.com/2016/11/25/fraudsters-eat-for-free-as-deliveroo-accounts-hit-by-mystery-breach/ https://nakedsecurity.sophos.com/2016/11/25/fraudsters-eat-f... BBC's Watchdog documentary: https://www.bbc.co.uk/programmes/articles/3ZMjkWFfDZQ8zFYQJLWFKQM/deliveroo https://www.bbc.co.uk/programmes/articles/3ZMjkWFfDZQ8zFYQJL... (with response from Deliveroo)