Drizly

Drizly operates as an alcohol delivery startup, facilitating online ordering and shipment of alcoholic beverages directly to consumers. Its services are primarily geared toward streamlining access to liquor retailers, leveraging digital platforms to connect customers with local and regional alcohol providers. Headquartered in Italy, the company focuses on modernizing traditional alcohol distribution channels through e-commerce solutions. The Drizly business model demonstrated substantial reach, evidenced by the exposure of 2.5 million customer records during a 2020 cybersecurity incident, which underscores its operational scale in managing sensitive consumer data across digital transactions.

In July 2020, Drizly experienced a significant data breach orchestrated by the threat actor group ShinyHunters. The attack compromised customer names, email addresses, hashed passwords, physical addresses, and phone numbers, subsequently leaking the database on hacker forums. This incident revealed vulnerabilities in the platform’s data protection measures despite the use of password hashing—a security practice indicating some baseline safeguarding efforts. In response, Drizly proactively notified affected customers but stopped short of mandating password resets, instead recommending voluntary credential updates. The breach highlighted challenges in securing consumer data within the hyperlocal delivery sector, particularly for startups managing high volumes of personal information.

Drizly’s handling of the breach reflects its position as a growing participant in the competitive alcohol delivery marketplace, where rapid scaling can strain cybersecurity infrastructure. Its avoidance of forced password resets differentiated its approach from others in the e-commerce sector who often implement stricter post-breach protocols. The incident remains a defining event for the company, demonstrating both the operational risks of digital-first retail models and the complexities of incident response coordination. No further ownership details or structural affiliations beyond its Italian headquarters are explicitly documented in the provided sources.