FreshMenu suffered a data breach in 2016 but kept the matter under wraps. According to haveibeenpwned.com, the personal information – device details, email IDs, phone numbers and physical addresses – of over 110,000 users was compromised in the incident. FreshMenu founder Rashmi Daga admitted the breach and put out an apology for not notifying users, even as the company claimed that sensitive information related to passwords and payments was intact. Cybersecurity experts feel the nature of the data compromised didn't warrant a legal obligation on the company's part to inform users.
However, FreshMenu claims that information such as user passwords or payment-related information was not breached. Th payment information, it claims, is stored in PCI DSS compliant systems on their side, which is absolutely safe.
However, FreshMenu claims that information such as user passwords or payment-related information was not breached. Th payment information, it claims, is stored in PCI DSS compliant systems on their side, which is absolutely safe.