All of this discussion about the company here (which isn’t responding in a correct and honest way) and not much discussion on the root cause of this problem. T

All of this discussion about the company here (which isn’t responding in a correct and honest way) and not much discussion on the root cause of this problem. The journalist and the 40+ People were victims of a credential stuffing attack which means they used the same password on multiple sites. Had they used a password manager to roll a new password per site and had deliveroo had proper rate limiting, this attack would have been mostly mitigated. There’s not much excuse for this behavior.