DoorDash reported a data breach in October 2025, revealing that an unauthorized party accessed user contact information including names, addresses, and phone numbers. The breach resulted from a social engineering scam targeting a company employee, and affected users in Canada, with potential implications for others in the U.S.