The Kushay Sushi & Pizza Breach Happened in 2022. The Data Just Went Public.

In January 2022, the database belonging to Kushay Sushi & Pizza, a Russian food delivery service operating at кушайсуши.рф, was breached and the personal details of 174,737 customers were exposed. The data recieved widespread circulation on dark web forums before most affected users had any idea their information had been compromised. For a regional food delivery platform, the scale and sensitivity of the exposure is partcularly alarming.

What Attackers Can Do With This Kushay Sushi & Pizza Data

With full names, email addresses, and phone numbers in hand, attackers can launch highly convincing phishing campaigns and SMS scams. Criminals who accessable this data can craft messages that appear to come from the delivery service itself, tricking customers into revealing payment details or login credentials for other accounts. The combination of contact information with real customer identities makes targeted social engineering straightforward.

What Was Exposed in the Kushay Sushi & Pizza Breach

• Email Address
• Phone Number
• First Name
• Last Name

Why This Breach Still Puts You at Risk

Data from a 2022 breach does not expire. Stolen records are traded, repackaged, and sold repeatedly on criminal marketplaces for years after the original incident occured. If your email address or phone number was in this database, you may still receive phishing attempts, scam calls, or see your credentials tested against other services through credential stuffing attacks. The risk is ongoing, not historical.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a backend database, typically by exploiting a vulnerability in a web application, an unpatched server, or weak access controls. Once inside, the attacker can export entire tables of customer records in seconds. In this case, the data appears to have been exported as a raw SQL dump, indicating direct access to the Kushay Sushi & Pizza server rather than a surface-level scraping attack.

Check If Your Data Was Exposed

HEROIC's breach database contains over 400 billion compromised records, including data from breaches like the Kushay Sushi & Pizza incident. Use HEROIC's free breach check tool to find out if your email address or personal details appeared in this or any other known breach. Early awareness is your best defense against identity theft and account takeover.