TaskRabbit

Summary

A web-based freelance service platform experienced a security breach, prompting the takedown of its digital infrastructure to contain unauthorized access. The incident involved potential compromise of user information including personally identifiable data and partial payment card details, with social media reports indicating defaced pages during the attack. The organization collaborated with external cybersecurity experts and law enforcement during remediation efforts, later restoring services while notifying affected individuals about possible data exposure. Investigations confirmed theft of truncated financial information linked to user accounts.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On April 16, 2018, TaskRabbit experienced a security breach that prompted the immediate takedown of its website and mobile application. The company notified users via email, disclosing unauthorized access to its systems and confirming collaboration with external cybersecurity experts and law enforcement agencies. Social media reports from users indicated visible signs of compromise, including defaced web pages, though the full scope of attacker activities remained unclear during initial assessments. TaskRabbit’s public communications acknowledged potential exposure of personally identifiable information (PII) and advised users to change passwords reused on other platforms as a precautionary measure. Service disruption persisted while forensic investigations determined the breach’s entry points and extent of data access.

Subsequent updates confirmed the theft of truncated payment card data, as detailed in a California data breach notification letter required by state law. The company restored website functionality after initial containment, accompanied by a public statement reiterating the potential compromise of user PII. Investigations remained ongoing to identify the attack vector and establish whether additional data categories beyond payment card fragments and PII were accessed. No ransomware or extortion demands were mentioned in available reports. The incident highlighted operational impacts through forced service suspension and procedural responses including third-party forensic engagement and regulatory compliance actions.

Sources

Sources available to members: 1 source.