Dodo Pizza acknowledges data breach affecting millions of customers after hacker claim

Russia's Dodo Pizza, a fast‑growing chain that operates roughly 1,500 restaurants across the country, has confirmed that a cyberattack may have exposed personal information belonging to its customers. The admission follows a public claim by an unidentified hacker group that it had infiltrated the company's digital infrastructure.

According to a statement released by Dodo Pizza, the breach could involve a range of data points, including customers' full names, residential addresses, email addresses, telephone numbers, dates of birth and details of individual orders. While the company stopped short of providing exact numbers of affected individuals, it warned that the scope of the compromised data is significant enough to warrant heightened vigilance.

The incident arrives at a time when Russian retailers and service providers have faced a spate of cyber intrusions, many attributed to sophisticated criminal networks operating both within and beyond Russia's borders. In recent years, attacks on point‑of‑sale systems, loyalty programs and e‑commerce platforms have become increasingly common, prompting heightened scrutiny from regulators and consumer‑rights groups.

Dodo Pizza said it has engaged independent cybersecurity experts to conduct a thorough forensic analysis and has reported the matter to relevant law‑enforcement agencies. Customers have been urged to monitor their accounts for any suspicious activity and to consider updating passwords on any Dodo Pizza‑related services. The company also indicated that it is implementing additional security measures, including multi‑factor authentication and enhanced encryption protocols, to prevent future incidents.

Under Russia's Federal Law on Personal Data, companies are obligated to protect user information and to notify authorities and affected individuals in the event of a breach. Failure to comply can result in administrative fines and, in severe cases, criminal liability for corporate executives. The current investigation will determine whether Dodo Pizza met these statutory requirements and whether any regulatory penalties are forthcoming.

Industry analysts note that the breach could erode consumer confidence in the brand, especially as the fast‑food sector relies heavily on repeat business and loyalty programs. They recommend that Dodo Pizza, along with other large chains, invest in continuous security monitoring, employee training and regular third‑party audits to mitigate the risk of similar attacks. The company's next steps are likely to include a public communication strategy aimed at restoring trust and possibly offering support services, such as credit monitoring, to those whose data may have been compromised.