Data gap at delivery service Flink fixed

Hackers were able to access thousands of customer records through the app's data interface. According to the company, it has closed the gap.

Security researchers have discovered a massive data leak at food delivery service Flink. The collective "Zerforschung" was able to view thousands of records via the app's data interface without much trouble, including names, addresses and credit card information. First, RBB

Following tips about the problem, Flink said it fixed the breach and informed customers. "We have of course reacted immediately to this and turned off the security vulnerabilities. Already since Saturday, March 6, 2021, the systems were running normally again with new security settings and protective measures," the company told the radio station.

With the information that hackers could have theoretically acquired due to the data breach, they could have taken over online accounts of those affected, among other things. "I was surprised to see the data lying around so openly. I first suspected it was just test data. But after a test order, I realized that it was real customer data," a member of Zerforschung told RBB

Flink promises - similar to its competitor Gorillas - to deliver groceries to customers within the shortest possible time. The service is available in several major German cities. Just earlier this month, Flink raised over 40 million euros in venture capital