This is a deeply concerning trend, and unfortunately it tracks with what we’re seeing more broadly: attackers are increasingly blending cyber and physical tactics to target high-value individuals through the apps we use everyday.
A few practical steps that can meaningfully reduce risk:
First, limit data exposure. Use unique emails and phone numbers for different services (especially delivery apps, financial accounts, and anything tied to your identity or location). The more attackers can correlate across datasets, the easier targeting becomes.
Second, lock down your accounts. Strong, unique passwords and hardware security keys (not just SMS 2FA) should be table stakes, particularly for email, exchange accounts, and any service that contains personal information.
Third, be thoughtful about real-time signals. Ordering food, posting location-tagged content, or sharing routines publicly can unintentionally create a live map of where you are and what you’re doing.
Fourth, add friction to your doorstep. If you can, avoid direct handoffs with unknown drivers. Use contactless delivery, building security, or package lockers where possible. If something feels off, trust that instinct and don’t open the door.
Finally, for those with significant exposure, this is a moment to think about physical security as part of your threat model. That can include anything from basic home security systems to more advanced measures depending on your profile.
Crypto doesn’t make someone a target, but perceived access to value does. The best defense is reducing the amount of signal an attacker can gather and increasing the friction at every layer.
Stay safe out there.
Megan Cassidy@meganrcassidy
A violent crime ring appears to have used hacked DoorDash/other app data to target wealthy crypto holders in the Bay Area and L.A. Armed robbers, posing as delivery drivers, arrived at victims' doorsteps, carrying an item the victim had just ordered. sfchronicle.com/crime/article/…
English
