Deliveroo was hacked and they didn't say anything: What are our rights?

HappyUser

Hello


On 5th November I received an email from Deliveroo to change my password because they 'value our security'.



I ignored it but when I tried to log in it forced me to change my pass which I did.


Today, I placed an order and after an hour or so I got several emails that my address changed, my phone changed and an order was placed on my account delivered to Stratford.


Obviously this means that my account was hacked.


Since I received the strange email from Deliveroo a week ago, I suspect that Deliveroo were aware of the breach in their security and they said nothing.


Now my account is hacked and who knows what personal information of me has been revealed to hackers.


Do you think I should change all my passes everywhere, cancel my debit card and generally get panicked?


Also, how can I get compensation from Deliveroo about that? I know that EU regulation is very strict about that and they oblige companies to compensate us.


Is there anyone else who got hacked?

bris

You don't even know they were hacked, you're just guessing. Though I suppose if you push hard enough you might get a free bag of chips.

BoGoF

Or you have fallen for a phishing scam and it was you that gave your log on details to scammers.

LilElvis

So Deliveroo cause you as much grief as Just Eat

https://forums.moneysavingexpert.com/discussion/6030722/just-eat-is-the-worst-company-ever

https://forums.moneysavingexpert.com/discussion/5940422/just-eat-hideous-charges

Might be worth changing your user name - it's not very appropriate.

born_again

So they emailed you that they something was amiss with your account, but you ignored it for a week.... and you think it's their fault...

Lucky that someone has not had a few takeways on you ....

stragglebod

LilElvis wrote: »

So Deliveroo cause you as much grief as Just Eat

https://forums.moneysavingexpert.com/discussion/6030722/just-eat-is-the-worst-company-ever

https://forums.moneysavingexpert.com/discussion/5940422/just-eat-hideous-charges

Might be worth changing your user name - it's not very appropriate.

I think you'll find that Deliveroo don't actually exist. Because according to the OP (when moaning about Just Eat:

HappyUser wrote: »

They are also a monopoly as I do not think there are any other companies we can order from.

DoaM

Yes, Just Eat are a monopoly ... Deliveroo and Hungry House are just figments of all of our imaginations.

eddddy

A serious hacker / fraudster won't be wasting their time having takeaways delivered to Stratford.

It's more likely somebody you know is doing this to prank / annoy you.

From what you say, I'd guess somebody has access to your email account - maybe they have your email password, or they know the PIN for your phone, or you left your email logged in on a device somewhere, etc.

(Maybe they live in Stratford, or perhaps more likely, they're having the takeaways delivered to somebody else they want to annoy.)

So maybe change your email password, and force a logout on all other devices.

Aylesbury_Duck

HappyUser wrote: »

Hello


On 5th November I received an email from Deliveroo to change my password because they 'value our security'.



I ignored it but when I tried to log in it forced me to change my pass which I did.


Today, I placed an order and after an hour or so I got several emails that my address changed, my phone changed and an order was placed on my account delivered to Stratford.


Obviously this means that my account was hacked.


Since I received the strange email from Deliveroo a week ago, I suspect that Deliveroo were aware of the breach in their security and they said nothing.


Now my account is hacked and who knows what personal information of me has been revealed to hackers.


Do you think I should change all my passes everywhere, cancel my debit card and generally get panicked?


Also, how can I get compensation from Deliveroo about that? I know that EU regulation is very strict about that and they oblige companies to compensate us.


Is there anyone else who got hacked?

When you did log on and change your password, I suspect you did so by clicking a link in that email. That would have taken you to a fake version of their site, into which you volunteered your security details. I can't see how else you ended up with your account being compromised within an hour.

That doesn't sound like a security breach, more that you've fallen for a phishing scam. I can't see how any compensation is due to you.

And yes, if your account has card details on it, get your account changed ASAP. If you're one of those people that use the same username/email and password combination for multiple sites, then yes, change them immediately, otherwise the scammers will try all sorts of things.

The_Rainmaker

The OP might actually decide it is safer and cheaper to get off his backside and go the outlet himself instead of constantly whining.

Diamandis

Please tell us which EU legislation means you get compensation.