Subway security incident history
Hacking, data breaches and other security incidents involving Subway, with related coverage.
Incidents: 2 · Most recent
Subway online ordering system exposes customer data
Impact: Customer contact details and order histories exposed; scale unconfirmed
It was found that changing a number in a URL in Subway's online ordering system allowed other customers' contact details and order histories to be viewed without any authentication. The Personal Information Protection Commission (PIPC) launched an investigation into how the leak happened and its scale. Subway said the suspension of online ordering was unrelated to the personal data leak.
Related reports: 4 · last report →LockBit claims ransomware attack on sandwich chain Subway
Ransomware group LockBit claimed to have attacked sandwich chain Subway. The specific extent of the damage and any confirmation or response from Subway have not been confirmed.
Related reports: 3 · last report →