Grubhub class action alleges customer and driver PII compromised in 2025 data breach

Grubhub class action overview:

• Who: Plaintiff Carl Mintz filed a class action lawsuit against Grubhub Holdings Inc.
• Why: Mintz claims Grubhub failed to protect the personally identifiable information (PII) of customers and drivers during a 2025 data breach.
• Where: The Grubhub class action lawsuit was filed in Illinois federal court.

A new class action lawsuit alleges Grubhub failed to protect the personally identifiable information of its customers and drivers during a data breach in 2025.

Plaintiff Carl Mintz filed the class action complaint against Grubhub Holdings on Jan. 19, 2026, in Illinois federal court, alleging negligence and violations of state and federal consumer laws.

Mintz argues Grubhub failed to protect the PII of its customers and drivers, including names, email addresses, phone numbers, home addresses, dates of birth, Social Security numbers, vehicle insurance information and driver’s license numbers.

Mintz claims Grubhub became aware of unauthorized individuals downloading data from certain Grubhub systems around January 2025 but has not yet revealed the total number of users affected or the types of data stolen in the GrubHub data breach.

“Upon information and belief, GrubHub has not yet sent notice of the GrubHub data breach to affected individuals,” the GrubHub class action lawsuit says.

Mintz wants to represent anyone whose PII was compromised in the GrubHub data breach. He demands a jury trial and requests declaratory and injunctive relief and an award of compensatory, punitive and nominal damages for himself and all class members.

Grubhub allegedly failed to implement proper data security

Mintz argues Grubhub failed to adopt reasonable and appropriate data security practices and procedures, including administrative, physical security and technical controls, to safeguard the PII of its customers and drivers.

“Because of this special relationship, the defendant required the plaintiff and class members to provide their private information, including names, Social Security numbers and other private information,” the GrubHub class action lawsuit says.

Mintz claims Grubhub failed to take the necessary precautions required to safeguard and protect the PII of its customers and drivers from unauthorized access and exploitation.

“Defendant’s actions represent a flagrant disregard of the rights of the plaintiff and the class, both as to privacy and property,” the GrubHub class action says.

In related news, Grubhub has agreed to a $7.15 million open settlement to resolve claims it added restaurants to its platform without permission.

Were you affected by the Grubhub data breach? Let us know in the comments.

The plaintiff is represented by William B. Federman and Jessica A. Wilkes of Federman & Sherwood.

The GrubHub data breach class action lawsuit is Mintz v. Grubhub Holdings Inc., Case No. 1:26-cv-00588, in the U.S. District Court for the Northern District of Illinois.

Read About More Class Action Lawsuits & Class Action Settlements:

• WWE accused of deceptive marketing tied to ESPN premium live events
• Red Sox hit with class action over junk fees on Fenway Park tickets
• RootStim and Ruahouine recall Minoxidil hair and beard growth serums due to child poisoning risk
• Starbucks class action alleges coffee not ethically sourced and contains industrial solvents