A data breach exposed serious privacy concerns for Glovo as a user reports surfaced on a dark network forum. A user on BreachForum, described as a hacker portal used to trade stolen data, claimed on 30 July to be offering a large database belonging to a Catalan home delivery company. The post originated from a Twitter account that focuses on cybercrime and the sale of compromised information, which EL PERIÓDICO, a newspaper within the same media group, notes can be cross-checked for verification.
The compromised dataset reportedly contains sensitive details of up to 37,509 riders who work for the company under a delivery model that uses yellow backpacks. These workers are described as independent contractors rather than formal employees. The exposed information is said to include the riders’ full names, dealer IDs, phone numbers, email addresses, bank account numbers, residential addresses, contract types, and shipment histories used to coordinate orders across locations.
Such a leak elevates privacy risks well beyond personal embarrassment. Bad actors could misuse the data to impersonate individuals, commit fraud, or attempt further breaches by leveraging the leaked identifiers and contact details.
Six million customer data
According to the forum listing, the stolen data set also covers approximately six million orders from Glovo’s customer base. The post claims roughly 5,790,563 customers are included, with information such as customer names, order codes, order statuses, and delivery times recorded in the dataset.
The package of information on offer on the illicit portal allegedly includes order identifiers, product details, complaint reasons, and indicators of whether refunds or product exchanges were granted to customers. The scope of this data hints at potential misuse not only for targeted phishing but also for credential stuffing or social engineering aimed at exploiting order histories.
EL PERIÓDICO, which belongs to the same media group, has reached out to Glovo for responses and is awaiting further details to corroborate and expand on this developing story.