Information technology · Private · yummysuperapp.com
On March 8, 2026, Yummy Rides suffered the unauthorized extraction of the full names and profile photos of approximately 30,000 drivers, exploiting an unpatched vulnerability. CEO Vicente Zavarce addressed the incident on X, describing it as a thwarted “attempt” and stating that no financial or sensitive user data was compromised. However, the actor GordonFreeman (attributed by VECERT) published the database of ~30,000 images linked to full names as a free download on the dark web, with screenshots as proof, and the NGO RedesAyuda (Luis Serrano) publicly refuted the company’s account, confirming that a data breach did occur.
