Domino's: Difference between revisions

===Domino's French and Belgium Leak  (2014)===

In 2014, a hacker group by the name of Rex Mundi, went on twitter-- now formally called X-- claiming to have obtained 650,000 customers personal information.<ref>{{Cite web |last=Cluley |first=Graham |date=2014-07-16 |title=Domino's Pizza refuses to pay ransom after customer database hacked |url=https://www.welivesecurity.com/2014/06/16/dominos-pizza-hacked/ |url-status=live |archive-url=http://web.archive.org/web/20260112220612/https://www.welivesecurity.com/2014/06/16/dominos-pizza-hacked/ |archive-date=12 Jan 2026|access-date=2026-01-26 |website=WeLiveSecurity}}</ref>  The hacker's threatened to release the information if Domino’s didn't pay the group 30,000 euros (equivalent to $40,800). In response, the company denied the ransom request from the hackers, and 6 month later, the hacker's released the data to the public that contained customer’s  email addresses, names, phone numbers, passwords, and physical address.<ref>{{Cite web |author=NBC News |date=2014-06-16 |title=Hackers Steal Domino's Pizza Customer Data in Europe, Seek Ransom |url=https://www.nbcnews.com/tech/security/hackers-steal-dominos-pizza-customer-data-europe-seek-ransom-n132591 |url-status=live |archive-url=http://web.archive.org/web/20250714115920/https://www.nbcnews.com/tech/security/hackers-steal-dominos-pizza-customer-data-europe-seek-ransom-n132591 |archive-date=14 Jul 2025|access-date=2026-01-29 |website=NBC News}}</ref> <ref>{{Cite web |author=Have I Been Pwned |date=2015-01-04 |title=Domino's Data Breach |url=https://haveibeenpwned.com/Breach/Dominos |url-status=live |archive-url=http://web.archive.org/web/20251231154707/https://haveibeenpwned.com/Breach/Dominos |archive-date=31 Dec 2025|access-date=2026-01-29 |website=Have I Been Pwned}}</ref>

On April 18, 2021, an cybersecurity researcher by the name of Alon Gal <ref>{{Cite web |last=Khanna |first=Monit |date=2021-05-24 |title=Domino's India Data Breach: Mobile Numbers, Address Of 18 Crore Orders Leaked |url=https://www.indiatimes.com/technology/news/dominos-india-data-breach-mobile-numbers-address-of-18-crore-orders-leaked/articleshow/127553498.html |url-status=live |access-date=2026-01-29 |website=India Times |archive-url=http://web.archive.org/web/20260223041327/https://www.indiatimes.com/technology/news/dominos-india-data-breach-mobile-numbers-address-of-18-crore-orders-leaked/articleshow/127553498.html |archive-date=23 Feb 2026}}</ref>  tweeted on twitter around 180 million orders and 1 million credit card information was stolen. <ref>{{Cite web |last=Coble |first=Sarah |date=2021-04-20 |title=Threat Actor Claims to Have Hacked Domino’s |url=https://www.infosecurity-magazine.com/news/threat-actor-claims-to-have-hacked/ |url-status=live |archive-url=http://web.archive.org/web/20251112044440/https://www.infosecurity-magazine.com/news/threat-actor-claims-to-have-hacked/ |archive-date=12 Nov 2025|access-date=2026-01-29 |website=Infosecurity Magazine}}</ref> Speculated to be the same hackers who hacked MobkWik, they advertised the data to be sold for around $550,000.  On April 20, the company responded by saying it was an information security incident and no financial data or credit card information had been affected <ref>{{Cite web |last=George |first=Amala |date=2021-05-11 |title=A primer on the Domino's Data Leak |url=https://blog.ipleaders.in/primer-dominos-data-leak/ |url-status=live |archive-url=http://web.archive.org/web/20250327233348/https://blog.ipleaders.in/primer-dominos-data-leak/ |archive-date=27 Mar 2025|access-date=2026-01-29 |website=Ipleaders}}</ref>, however couple day's later, the company changed their stance by acknowledging the 180 million and 1 million credit card leaked information.  <ref>{{Cite web |author=CNBCTV18 |date=2021-05-24 |title=Domino's data breach: Details of 18 crore orders, 10 lakh credit cards compromised |url=https://www.cnbctv18.com/information-technology/dominos-data-breach-details-of-18-crore-orders-10-lakh-credit-cards-compromised-9408011.htm |url-status=live |archive-url=http://web.archive.org/web/20250722171014/https://www.cnbctv18.com/information-technology/dominos-data-breach-details-of-18-crore-orders-10-lakh-credit-cards-compromised-9408011.htm |archive-date=22 Jul 2025|access-date=2026-01-26 |website=CNBCTV18}}</ref>  It has been speculated that the hack has occurred around February 2021.

To process customer's phone orders, in collaboration with ConverseNow Technologies Inc. use an AI voice assistant, however it was claimed that domino's recorded customers orders for the purpose of improving their AI voice assistant, violating the California Invasion of Privacy Act.<ref>{{Cite web |last=Milano |first=Ashley |date=2024-11-11 |title=Domino's Class Action Lawsuit: Pizza Chain Accused of Recording Calls Without Consent |url=https://injuryclaims.com/news/class-action-privacy-data-and-tcpa/dominos-class-action-lawsuit-call-recording |url-status=live |archive-url=http://web.archive.org/web/20250520060035/https://injuryclaims.com/news/class-action-privacy-data-and-tcpa/dominos-class-action-lawsuit-call-recording |archive-date=20 May 2025|access-date=2026-01-26 |website=Injury Claims}}</ref> The company ConverseNow Technologies Inc. had made an attempt to dismiss the California Invasion of Privacy Act, citing that ordering pizza didn't warrant an expectation of privacy <ref>{{Cite web |last=Holman |first=Eddie |last2=Shapiro |first2=Tracy |last3=Lee |first3=Doo |date=2025-09-04 |title=U.S. Federal Court Allows CIPA Class Action Against AI Customer Service Provider to Proceed |url=https://www.wsgr.com/en/insights/us-federal-court-allows-cipa-class-action-against-ai-customer-service-provider-to-proceed.html |url-status=live |archive-url=http://web.archive.org/web/20260123231903/https://www.wsgr.com/en/insights/us-federal-court-allows-cipa-class-action-against-ai-customer-service-provider-to-proceed.html |archive-date=23 Jan 2026|access-date=2026-01-26 |website=Wilson Sonsini}}</ref>, however the court dismissed these claims due to the companies earlier statements regarding their security and privacy policy. This case is currently ongoing and has yet to reach an judgement.