The popular AI-powered grocery and recipe delivery service, Hungryroot, has allegedly suffered a massive data breach, with a threat actor claiming to possess the personal information of over 1.18 million users. The data, which was advertised for sale on a dark web forum, allegedly stems from a breach that occurred on June 29, 2025. Hungryroot is a well-known service in the United States that uses artificial intelligence to help users with meal planning and grocery shopping, delivering fresh ingredients and recipes directly to their homes. The company’s innovative approach to personalized nutrition and convenience has made it a significant player in the online grocery delivery market.
The actor behind the sale claims the compromised database contains a wealth of sensitive user information. The data is being offered in multiple file formats, including a .sql dump and .txt files. This alleged breach could have significant privacy implications for a large number of individuals who have trusted the service with their personal and financial details. The origin of the breach is currently attributed to the individual or group who posted the data for sale on the online forum.
According to the forum post, the following user data has been allegedly compromised:
- Full Names
- Emails
- Billing Addresses
- Passwords
- All Orders
- All Customer Information
- All Coupons