Hackers Know Your Domino’s Pizza Order

Jun 16, 2014 at 12:59 PM ET

A group of hackers by the Latin name of Rex Mundi (King of the World) is currently blackmailing French and Belgian branches of Domino’s Pizza, demanding ransom cash in exchange for breached customer data.

Since last week, the group has retrieved nearly 600,000 sets of personal information—including customers’ pizza orders and side selections—from the backend of the Domino’s website, and is requesting 30,000 euros ($40,700) to return the data. If it doesn’t receive its ransom, Rex Mundi will release the confidential information to the public by end of day Monday.

Domino’s alerted customers of the data breach—which excludes, at least for now, credit card information—Friday on Twitter, where the pizza conglomerate apologized for its encryption issues and encouraged buyers to change their account passwords. The brand’s reps have since confirmed the breach is limited to data from France and Belgium.

Rex Mundi scripted its plan to release Domino’s customer information in a letter posted last week to an online clipboard service. Addressed to “friends and foes,” the letter outlines the forms of personal data the group has retrieved from encrypted Domino’s sources, namely: “customers’ full names, addresses, phone numbers, email addresses, passwords and delivery instructions.” If Domino’s does not fork over the ransom money, the group also plans to release customers’ pizza preferences, “because why not.”

The hacker group also threatened the pizza brand and its clients on Twitter, but Twitter has since suspended the organization’s account. The police are also involved: “Domino’s Pizza France is currently working closely with the relevant authorities and with appropriate experts,” the chain said in a statement regarding the most recent security breach.

Rex Mundi has previously pulled similar stunts, demanding $20,000 from money lender group AmeriCash in 2012. When AmeriCash refused to hand over the ransom, the hackers released the data of 10,000 loan applicants online.

The group will reveal its latest data collection at 8 p.m. Central European Time. Until then, keep your embarrassing pizza orders to yourselves.