SevenRooms Data Breach (2022)

On December 11, 2022, restaurant customer management platform SevenRooms appeared in a major breach notification after more than 400GB of data containing records for 1.2 million unique email addresses, customer names, and purchase histories was posted for sale on a popular hacking forum. The company confirmed that the incident stemmed from unauthorised access to a file transfer interface belonging to one of its third-party vendors. If you have ever made a reservation or dined at a restaurant using the SevenRooms platform, your personal details may now be circulating among cybercriminals.

Reported Details from the Disclosure

The primary disclosure on Have I Been Pwned states that the breach occurred in 2022 and was publicly disclosed on December 11 of that year. It explicitly lists the compromised information as email addresses, names, and purchase records. SevenRooms itself attributed the incident to unauthorised access of a file transfer interface operated by a third-party vendor rather than a direct compromise of its own core systems. The notification does not specify the exact date the data was initially stolen or the identity of the threat actor who first obtained it. No ransom demand figure or negotiation details were included in the public filing.

Why This Matters for You and Your Family

When your name, email address, and purchase history from restaurants are exposed, it creates a permanent record that can be used to build a profile of your habits, locations, and spending patterns. Criminals buy this information in bulk to launch targeted phishing campaigns that appear legitimate because they reference specific dining experiences or reservation dates. For families, the risk extends beyond the primary account holder: children’s birthdays celebrated at those restaurants, family dietary preferences, and frequent dining companions can all be inferred from purchase data. Once sold on underground forums, the dataset remains available indefinitely, increasing the chance that your information will be reused in future scams or identity fraud attempts years later.

1.2 million records represent a significant slice of restaurant-goers across multiple venues, meaning the exposure is not limited to one geographic area or customer demographic.

Doxxing and Identity-Chain Implications

Purchase histories tied to email addresses and real names serve as powerful linking data in doxxing chains. A criminal who obtains this dataset can correlate it with other breaches to connect your dining habits to social-media handles, home addresses, or phone numbers. This linkage turns a seemingly harmless reservation record into a stepping stone for more invasive targeting, including swatting, physical stalking, or account takeovers on services that share the same email. Credential leaks of this nature frequently cascade into gaming accounts belonging to you or your children, where the same email-password combination is reused. Once a gaming profile is hijacked, additional personal details and friendships are exposed, lengthening the identity chain and multiplying the attack surface for your entire household.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught and addressed in hours rather than months.
• Rotate the password used at any restaurant or reservation service that shares your email, and enable 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts which often chain back to the same breached email or address.
• Let remediation specialists manage takedown requests for any data-broker listings that surface from this or linked breaches.

The incident underscores that third-party vendor weaknesses remain one of the most reliable ways for attackers to reach customer data stored by otherwise secure companies. Staying ahead requires more than changing a single password; it demands ongoing visibility into how your identity fragments appear across the internet. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks that often follow leaks like SevenRooms.