DoorDash class action claims data breach exposed PII of thousands of users

DoorDash data breach class action overview:

• Who: Plaintiff Michelle Andrizzi filed a class action lawsuit against DoorDash Inc.
• Why: Andrizzi alleges DoorDash failed to safeguard the personally identifiable information (PII) of herself and other class members in a recent data breach.
• Where: The class action lawsuit was filed in California federal court.

A new class action lawsuit alleges DoorDash failed to safeguard the personally identifiable information of thousands of users in a recent data breach.

Plaintiff Michelle Andrizzi’s class action lawsuit claims DoorDash failed to safeguard the PII of herself and other class members during the data breach, which she argues led to unauthorized access to its information systems and the disclosure of that information. 

“Plaintiff and class members now face a lifetime risk of identity theft due to the nature of the information lost, which they cannot change and which cannot be made private again,” the DoorDash class action lawsuit says.

The data breach exposed the names, email addresses, phone numbers and physical addresses of some of its users, including customers, dashers and merchants, according to the DoorDash class action lawsuit. 

Andrizzi wants to represent a nationwide class of consumers whose PII was accessed and/or acquired by an unauthorized party in the DoorDash data breach. 

DoorDash failed to use ‘reasonable’ security procedures, class action says

Andrizzi claims DoorDash failed to have adequate security measures in place and thus bears responsibility for the data breach occurring. 

“Defendant failed to use reasonable security procedures and practices appropriate to the nature of the sensitive, unencrypted information it was maintaining for plaintiff and the class members,” the DoorDash class action lawsuit says.

Andrizzi claims DoorDash is guilty of negligence, negligence per se, breach of third-party beneficiary contract, breach of implied contract, invasion of privacy, breach of fiduciary duty and unjust enrichment. 

The plaintiff demands a jury trial and requests declaratory and injunctive relief and an award of actual, statutory, nominal and consequential damages for herself and all class members.

A consumer filed a separate class action lawsuit against DoorDash and Apple Pay earlier this year over claims they charged users for DashPass subscriptions without their consent.

Were you affected by the DoorDash data breach? Let us know in the comments.

The plaintiff is represented by Daniel Srourian of Srourian Law Firm P.C.

The DoorDash data breach class action lawsuit is Andrizzi v. DoorDash Inc., Case No. 3:25-cv-09926, in the U.S. District Court for the Northern District of California.

Read About More Class Action Lawsuits & Class Action Settlements:

• P&G sued over alleged lead contamination in Tampax tampons
• Pods moving and storage company sued over deceptive marketing emails
• Nissan recalls 41K Sentras due to windshield air bubble issue
• Roblox enhances child safety by restricting chats with adults