Data gap fixed for Flink delivery service

Hackers were able to access thousands of customer data via the app's data interface. The company says it has closed the gap.

Security researchers have discovered a massive data leak at food delivery service Flink. The "Zerforschung" collective was able to access thousands of data records, including names, addresses and credit card information, via the app's data interface without any major problems. Initially, the RBB reported on the findings.

Following reports of the problem, Flink said it had fixed the vulnerability and informed its customers. "We naturally responded immediately and fixed the security vulnerabilities. The systems have been running normally again since Saturday, March 6, 2021, with new security settings and protective measures," the company told the broadcaster.

With the information that hackers could theoretically have acquired due to the data protection gap, they could have taken over the online accounts of those affected, among other things. "I was surprised that the data was lying around so openly. At first I thought it was just test data. But after a test order, I realized that it was real customer data," a member of Zerforschung told RBB.

Like its competitor Gorillas, Flink promises to deliver groceries to customers in the shortest possible time. The service is available in several major German cities. Flink only raised over 40 million euros in venture capital at the beginning of the month.