Hackers holding Domino’s Pizza customer data to ransom

Hackers are holding the personal data of more than 600,000 Domino’s Pizza France and Belgium customers ransom for €30,000.

The group, called Rex Mundi, posted details of its hack on Twitter on Friday (June 13). It claims it will release the information – including full names, addresses, emails, passwords, delivery addresses and favourite pizza toppings – tonight if their demand is not met.

The hackers tweeted: “We hacked the websites of [Domino’s France] and Domino’s Belgium, and downloaded 600,000 customer records  Find out tonight whether Domino’s Pizza France thinks their customers’ privacy is worth 30,000.”

They claimed it took four days for Domino’s to notify its customers about the hacking and that the company had not contacted them.

Several vulnerabilities

Rex Mundi also mocked the delivery pizza firm after it managed to prevent one vulnerability in its code from being hacked, but left several others in place.

“Fun fact: Domino’s Pizza France patched ONE vulnerability on their Belgian site, but left several other vulnerabilities in their code,” it tweeted. “#Fail.”

Domino’s acknowledged the hack on Twitter, describing the hackers as seasoned professionals and encouraging users to change their passwords.

Rex Mundi's Twitter account was suspended by Twitter today (June 16).