828 Restaurant Contacts Leaked. The Source: French Menu Platform TastyCloud.

HEROIC Cyber's DarkHive breach intelligence has confirmed that TastyCloud, a French digital menu platform used by restaurants to run in-venue ordering, suffered a database breach on December 24, 2024 that compromised 828 contact records. The leaked data set includes first names, last names, email addresses, and phone numbers linked to restaurant and hospitality accounts.

Why This Hospitality Database Breach Is Dangerous

TastyCloud's customers are restaurateurs, managers, and staff, not anonymous consumers. An attacker with name, email, and phone number can impersonate the platform to push fake invoice updates, call fraudulent support lines, or slip malware-laced menu editor links into the inbox of a busy restaurant manager who assumes every TastyCloud message is legitimate.

What Was Exposed in TastyCloud

• 828 contact records
• First names
• Last names
• Email addresses
• Phone numbers

Why This Matters

Restaurant operators trust digital menu vendors to handle operational data carefully. A single compromised email with the TastyCloud brand attached can lead to a takeover of the restaurant's payment terminal, point of sale, or reservation system. The 828 contacts here cover a concentrated, high-value audience that attackers love.

How Food & Drink Database Breaches Work

Small-to-mid SaaS vendors serving hospitality usually hold PII in a single central database. When attackers find an exposed admin login, a forgotten API key, or an outdated plugin, the entire client contact table can be dumped in minutes. The records then circulate on French-language Telegram groups that specialize in B2B phishing.

Check If You Are Affected

HEROIC's identity protection platform scans over 400 billion compromised records, including hospitality SaaS breaches like TastyCloud. Run a free scan to see whether your email, phone number, or personal data appears in this breach or any other known dataset.