in Newswire Published on January 28, 2026

Grubhub Lawsuit Claims Food Delivery App Failed to Prevent January 2025 Data Breach

Bianchi v. Grubhub Holdings, Inc.

Filed: January 21, 2026 ◆§ 1:26cv671

A class action lawsuit claims Grubhub failed to prevent a January 2025 data breach that exposed thousands of customers’ and employees’ personal information.

Defendant(s)

GrubHub Holdings, Inc.

Law(s)

State(s)

Illinois

Categories

Food Data Breach Class Action Lawsuit

A proposed class action lawsuit claims that Grubhub failed to defend its customers’ and employees’ sensitive personal and financial information from a 2025 data breach.

Get class action lawsuit and settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The 29-page lawsuit claims that in January 2025, cybercriminals gained access to Grubhub’s internal systems, where the personal information of an estimated tens of thousands or even hundreds of thousands of people was stored, including Social Security numbers.

The complaint alleges that Grubhub failed in its legal obligation to safeguard the confidential data in its possession. Per the case, Grubhub willfully ignored affected users’ privacy rights by failing to implement known and reasonable measures to protect their sensitive information.

Additionally, while Grubhub published a notice of the data breach on February 3, 2025, allegedly at least a month after the breach was first detected, the lawsuit argues that this wait cost affected customers and employees valuable time they could have used to begin discovering or remedying the effects of the data breach.

Per the suit, affected current and former Grubhub users remain unsure of exactly what personal information of theirs has been exposed, where it has been transferred or used, and the extent of the breach’s impact on their lives.

The filing states that information exposed in the Grubhub data breach may include:

Social Security numbers;
Names;
Vehicle insurance information;
Home addresses;
Phone numbers;
Driver’s license numbers;
Email addresses; and
Dates of birth.

The Grubhub class action lawsuit seeks to represent anyone in the United States whose personally identifiable information or financial information was exposed to unauthorized third parties as a result of the January 2025 Grubhub data breach.

Check out ClassAction.org’s lawsuit list for the latest open class action lawsuits and investigations.

Case Spotlight

Video Game Addiction Lawsuits

If your child suffers from video game addiction — including Fortnite addiction or Roblox addiction — you may be able to take legal action. Gamers 18 to 22 may also qualify.

Learn more:Video Game Addiction Lawsuit

Depo-Provera Lawsuits

Anyone who received Depo-Provera or Depo-Provera SubQ injections and has been diagnosed with meningioma, a type of brain tumor, may be able to take legal action.

How Do I Join a Class Action Lawsuit?

Did you know there's usually nothing you need to do to join, sign up for, or add your name to new class action lawsuits when they're initially filed?

Read more here: How Do I Join a Class Action Lawsuit?