iFood reports data leaks, but only 2% of users

In a statement, the company said it found no signs of a leak at this level.

iFood confirms leakage of 2% of its user base

• According to information from the company, the data leak that is being cited in the media is an isolated case that occurred in December 2025 and would have been contained quickly;
• According to the company, the number of users affected was 2%, around 1.2 million people;
• Furthermore, only names and CPFs were leaked, but iFood guarantees that people’s access data to the platform and financial information were not exposed.

Below, check out the full note:

“iFood did not find any evidence that 43 million user data were leaked. After successive analyses, we identified that the material made available on the internet refers to an isolated incident, which occurred in December 2025, and which was quickly neutralized by our security protocols. The event involved registration data, such as name and CPF, without any compromise of passwords, payment methods or financial records, with an impact restricted to around 2% of our user base.

iFood regrets what happened and reinforces to users that all communications are made only through the platform’s official channels. The security of our community is a priority and we continue to act in strict accordance with the General Data Protection Law (LGPD) to constantly improve our systems.”