iMenu360 Data Breach (2022)

iMenu360 was listed on Have I Been Pwned on August 11, 2022, confirming that records belonging to 3.4 million customers had been exposed in a breach that occurred in late 2022. The company, which operates an online food-ordering platform, had its customer database compromised, placing names, physical addresses, phone numbers, email addresses, and precise latitude-longitude coordinates into the hands of unknown threat actors. If you or your family ever placed an order through a restaurant or business using iMenu360, your personal details may now be circulating beyond the company’s control.

Reported Details from the Disclosure

The primary record on Have I Been Pwned states that 3.4M customer records were exposed. The data types listed are email addresses, names, phone numbers, physical addresses, and latitude and longitude pairs. The breach is dated to late 2022, with the listing appearing publicly on August 11, 2022. Multiple direct outreach attempts to iMenu360 between April and August 2023 received no response, so the company has not issued its own public notification or confirmed the exact intrusion vector. The disclosure does not specify how the data was obtained or whether a ransomware group was involved.

Why This Matters for You and Your Family

When a food-ordering platform loses address, phone, and location data, the consequences reach far beyond spam. Delivery addresses are often home addresses. Latitude-longitude pairs can pinpoint a residence to within a few meters. Combined with names and phone numbers, this information gives criminals an immediate foundation for targeted scams, phishing calls that sound legitimate because they reference recent orders, or even physical intimidation. Your family members who share the same address are automatically linked to the same exposure. Children who have used family accounts on delivery apps inherit part of this risk through association.

The Doxxing and Identity-Chain Implications

Physical addresses and geolocation data are high-value connectors in doxxing chains. Once an attacker ties your name and phone to a confirmed home location, they can cross-reference it with other leaks to build a full profile that includes relatives, social-media accounts, and workplace details. A single credential harvested from this breach can be tested across banking, email, and shopping sites. Because many people reuse passwords, the exposure of iMenu360 data often becomes the first link in account takeover sequences. Gaming accounts belonging to children are especially vulnerable; a parent’s leaked email and phone number can be used to reset passwords on Roblox, Fortnite, or Discord profiles that share the household address.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including cleanup of exposed records.
• Rotate the password used on any iMenu360-linked restaurant accounts anywhere it is reused, and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same address or parent email.
• Let remediation specialists handle takedown requests for any data-broker listings that surface your address or phone number from this breach.

The incident underscores how even a medium-severity breach involving delivery data can quietly erode your family’s privacy for years. Start your DoxxScan trial today; its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts give you a practical way to reduce the long-term risk created by leaks like iMenu360.