DoorDash confirms data breach affected 4.9M customers, workers and merchants
> The information accessed is not sufficient to make fraudulent charges on your payment card.<p>In other words... "We leaked a bunch of your personal information, but at least it's not enough data to steal your money!"<p>All of these leaks have the cumulative effect of making ineffective very commonly used security verification questions: "Can I verify that last 4 of your social? And the last 4 of your credit card?"<p>How long will it take for us to accept that this kind of data can no longer be assumed private? The sooner, the better, mainly so companies stop using it as a secondary form of identity verification.