iMenu360 imenu360.com iMenu360 data breach: what happened and what to do
Around late 2022, customer records from the online ordering platform iMenu360 were exposed. Have I Been Pwned lists 3,425,860 accounts, with names, emails, phone numbers, physical addresses and latitude and longitude pairs.
View all 13,177 breaches- Breach date
- 11 Aug 2022
- Affected
- 3,425,860
- Data exposed
- Email addresses, Latitude and longitude pairs, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
iMenu360 is an online ordering platform used by restaurants. In approximately late 2022, about 3.4 million customer records from ordering systems on the platform were exposed. Have I Been Pwned (HIBP) lists 3,425,860 accounts and added the breach in August 2023.
HIBP says it tried to contact iMenu360 between April and August 2023 and got no response, so there is no company statement to cite.
Sources checked: haveibeenpwned.com, consumer.ftc.gov, reportfraud.ftc.gov
Last verified against the official page:
What was exposed
The data contains names, email addresses, phone numbers, physical addresses, and latitude and longitude pairs. There are no passwords in the listing.
What it means for you
This is a contact and location set: who you are, where you live, and how to reach you. That combination suits phishing and smishing (scam texts). A message that knows you ordered food from a nearby restaurant can sound convincing. Coordinates make the address more precise than a street name alone.
No passwords were listed, so a password change isn't the main fix here. Slow down on unexpected texts and calls instead, and never act on a message that pushes you to pay or log in quickly.
What to do if you were in it
- 1
Be skeptical of texts and calls about your orders
Scammers can use a name, number and address to sound legitimate. Don't click links in unexpected messages; the FTC explains how to recognize and avoid phishing.
- 2
Never share codes or card details on inbound contact
A real restaurant won't ask for a one-time code or full card number by text. Hang up and contact the business using a number you look up yourself.
- 3
Report scam messages
Forward scam texts to 7726 (SPAM) and report fraud at ReportFraud.ftc.gov.
- 4
Check which other breaches include you
Run a free Serus scan to see which other breaches include your email or phone. Serus monitors breach databases and the dark web and alerts you; it can't remove data from a breach.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the iMenu360 breach?
Search your email address or phone number on Have I Been Pwned, or run a free Serus scan.
What was exposed?
Names, email addresses, phone numbers, physical addresses and latitude and longitude pairs, according to Have I Been Pwned.
Should I change my password?
No passwords were listed in this breach. Change a password only if you reused it somewhere that was exposed.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
