TL;DR
Get everyday essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
Dodo Pizza says hackers attacked its IT systems on September 27–28 and may have accessed some customers’ personal information and order details. The company says it notified Russia’s data regulator, blocked the hackers’ access and is reviewing the incident; a much larger figure reported by the Telegram channel Baza has not been confirmed by the company.
Dodo Pizza said hackers attacked its IT systems on September 27–28 and may have accessed some customers’ personal information and order details. The Russian pizza chain said it had blocked the attackers’ access, notified Russia’s data regulator and begun an internal review; it said payment data was not stored on its systems.
The company said the information potentially exposed could include customers’ names, addresses, phone numbers, email addresses and dates of birth, as well as details of their orders. Dodo Pizza did not specify how many customers may have been affected or say that the listed information was confirmed to have been taken. Its statement described the data as potentially accessed.
Dodo Pizza said it had notified Roskomnadzor, Russia’s communications and personal data regulator. The company also said the hackers had been blocked from accessing its data and that an internal review was underway. It did not provide a timetable for that review or explain how the attackers entered the systems.
The Telegram channel Baza, which Meduza described as close to Russia’s security services, reported that hackers obtained data on 68 million Dodo Pizza customers across multiple countries, including order histories spanning 15 years. That figure and account of the data were attributed to Baza; Dodo Pizza had not confirmed them in the information available in Meduza’s report.
Customer Records Across 28 Markets
The possible exposure matters because the categories Dodo Pizza listed combine contact details, dates of birth and purchasing records. If accessed, such information could be used to target customers with convincing scam messages or reveal aspects of their ordering habits. The company has not said that any such misuse has occurred, and the scale of any exposure remains unconfirmed.
Dodo Pizza’s footprint gives the incident a potential reach beyond Russia. Meduza reported that, as of fall 2026, the chain operated more than 1,527 pizzerias in Russia and 27 other countries. The company has not said how many locations or customers are connected to the affected systems, so that network size does not establish the number of people whose data may have been exposed.
The company’s statement that it does not store payment data narrows the specific risk it described: stored payment details were not among the information it said might have been accessed. That does not establish whether other information was taken, or whether data held elsewhere by service providers could be involved.
Products Worth Considering
LG C2 Series 65-Inch OLED evo 4K Smart TV (OLED65C2PUA, 2022)
Samsung 42-Inch Class OLED S90F 4K Smart TV (2025)
Dyson Ball Animal Total Clean Upright Vacuum
As an affiliate, we earn on qualifying purchases.
Attack Dates and Company Response
The attack occurred over September 27–28, 2026, according to Dodo Pizza’s account reported by Meduza. The company’s public response identified several possible categories of customer information and outlined immediate steps: reporting the incident to Roskomnadzor, blocking the attackers’ access and beginning an internal review.
The public account remains an initial disclosure rather than a completed incident assessment. Dodo Pizza has not released technical details about the affected systems, the method of entry or whether the attackers copied data. Meduza’s report also relayed Baza’s much larger estimate, but did not present it as a figure verified by the company.
The company’s international operations are relevant to the possible scope, but the number of pizzerias does not show how its customer systems are organized or whether records from every country were involved. No country-by-country breakdown was included in the reported statement.
““We don’t store payment data — it’s safe.””
— Dodo Pizza, in a statement reported by Meduza
Scope and Data Access Unconfirmed
It is not yet clear how many customers may have been affected, whether the attackers copied any records, or which countries and systems were involved. Dodo Pizza’s reported wording says customer information may have been accessed; it does not confirm that every listed category was taken.
Baza’s report of 68 million customer records and 15 years of order histories remains a claim attributed to that channel. The company’s reported statement did not validate that number. The available information also does not establish whether the attackers attempted to publish, sell or use any data, or whether customers have received individual notices.
Findings From the Internal Review
Dodo Pizza said it is conducting an internal review, but did not announce when it expects to finish or when it will release further findings. The review may clarify which systems were affected, whether data was taken and how many customers need to be informed.
The company has already said it notified Roskomnadzor and blocked the hackers’ access. Further public updates from Dodo Pizza or information from the regulator could establish the incident’s confirmed scope. Until those details are available, the reported customer count and the extent of any data loss remain unresolved.
Key Questions
When did the Dodo Pizza cyberattack happen?
Dodo Pizza said the attack took place on September 27–28, 2026.
What customer information may have been accessed?
The company said it may include names, addresses, phone numbers, email addresses, dates of birth and order details. It has not confirmed that all of these data types were taken.
Were payment details exposed?
Dodo Pizza said it does not store payment data and described it as safe. Its statement does not establish whether other systems or service providers were involved.
Did the breach affect 68 million customers?
The figure of 68 million came from Telegram channel Baza, as reported by Meduza. Dodo Pizza had not confirmed that number in the available account.
What is Dodo Pizza doing about the attack?
The company said it blocked the hackers’ access, notified Roskomnadzor and began an internal review. It has not given a timetable or reported the review’s findings.
Source: rss
