A woman has been left stunned after her Just Eat account was hacked – to send food to West Bromwich. Food was sent to addresses in the Black Country, Birmingham and Dundee within the space of a few minutes.
The 52 year old received notifications regarding her orders, so logged into her account and discovered £50 worth of food had been sent to a West Brom address. Within moments another notification popped up saying a home in Dundee was getting £32 worth of takeaway.
After calling Just Eat she was directed to the Just Eat app chat function and from there told to go to Natwest – her bank. Her bank agreed to make sure she wouldn’t have to pay for the food but told her that Just Eat really should have sorted it all out for her. Just Eat has said it is investigating what happened with the two bogus orders. They added the incident was likely not to be the result of a Just Eat data breach.
READ MORE20 councils still yet to pay £150 council tax rebate – full list
She said: “Just Eat were really unhelpful. I was so cross about it. I looked on the TrustPilot reviews for Just Eat. I’m clearly not the only one whose had this kind of problem with them.” She said: “I just suddenly got this notification for an order I hadn’t made. I phoned the restaurant in Birmingham and told them it wasn’t me and I was told not to worry – just to cancel the order.
“I cancelled the order and the app told me I was being charged the full price anyway. Then the other order came in from Dundee. I tried to cancel that one quickly but cancelling wasn’t an option for some reason so I rang Just Eat. It wasn’t easy finding a phone number for them – they don’t make it easy to complain about being defrauded.
“A woman on the phone said there was nothing she could do and that I should tell them on the app chat thing. When I did that they said I should call my bank and change my password. Then, when I went to change my password the link just didn’t work so I just deleted my bank card details. Who knows how many more orders from around the country I would have got otherwise?”
She said Natwest were helpful and assured her they would repay the sum. Sure enough, on Wednesday, the money went out of her bank account to Just Eat and Natwest paid in the same amount. She said: “It’s just a good thing I spotted the notification when I did – there could have been people ordering food all night on my account. They could have cleared me out.”
JustEat said: “Protecting our customers from online fraud is of utmost importance to us and we have multiple security measures in place to protect customer information. We are currently conducting a thorough investigation of this issue to understand the cause and have been in touch directly in touch with the customer to resolve the matter.
“We do not store customer card details on our website or app and all payments are managed securely by an independent external payment service provider. Additionally, our systems screen customers’ login credentials against a list of breaches from all over the web, and we proactively alert customers should they need to change their password.”
Stay up to date with all the latest news and opinion on days out, nights out, shopping and plenty more with our Daily What’s On Email update newsletter – and it’s completely free.