Dodo Pizza confirms cyberattack: data of 68 million clients at risk

This statement reduces the risk of direct financial losses for customers. However, the leak of contact data and order history still opens up opportunities for fraud.

How big is the leak?

It is not the company but the attackers themselves who are citing exact figures. According to the DATASUCKERS group, 2–3 TB of information on approximately 68 million customers has been stolen, including data and order history of users from various countries.

There is no independent confirmation of these figures yet. Dodo Pizza has not disclosed the exact number of affected customers.

The company has not clarified whether data of users from Kazakhstan was stolen. Meanwhile, the hackers claim they obtained information about customers from all countries where the chain operates.

The international Dodo Brands network brings together more than 1,300 pizzerias and coffee shops in 26 countries worldwide, including Kazakhstan and Russia.

How does this endanger customers?

Even without payment data, the stolen information poses a threat. The Blue Screen service, which advised the chain's Kazakhstani users to be more vigilant, draws attention to the risk of targeted phishing.

Name, phone, email, address, and contents of past orders allow fraudsters to compose a convincing message on behalf of the company. A call or letter "from the support service" referencing "your last order" looks credible precisely because the fraudster knows real details.

What should users do?

The Blue Screen service has published practical recommendations for Dodo Pizza customers:

• be more attentive to calls, letters, and messages allegedly coming from the company;
• do not click on suspicious links;
• do not share SMS codes or bank card details;
• change the password for the account — especially if the same one is used on other services.

Changing the password is a key measure. Reusing the same password across multiple platforms turns a local leak into a chain reaction: a compromised account at the pizzeria opens access to email, banks, and work services.

What's next?

The situation is developing in several directions. Within the company, the investigation of the incident is ongoing — its results will show the actual scale of the leak and the attack vector. Roskomnadzor received the notification and will assess compliance with personal data legislation requirements.

The question of Kazakhstani customers' data remains open: the company is not commenting on it, and the hackers' claims about "all countries of presence" require verification. For the Eurasian market, the story serves as another reminder: even large chains with their own IT teams remain vulnerable, and a competent response to the incident — open communication and quick blocking of access — has become part of the brand's reputational strategy.