Names, credit card data, addresses, and information on transactions as recent as yesterday are being sold online.
Buzzfeed says information including “names, the last four digits of credit card numbers, and order histories” appearing to belong to 278,531 Instacart accounts is available to buy. (Though it’s impossible to verify that this number doesn’t include duplicates or incorrect data.) Buzzfeed did confirm with two Instacart users that the order date, transaction amount, and credit card numbers included in the cache matched their recent purchases. The data also includes users’ emails addresses.
Instacart denies it has been hacked, stating that all compromised accounts are suspended forcing users to reset their passwords.