AIBU to question Domino's response to an alleged hack and ICO report

[OnTheBoardwalk]

Domino’s seems to have been hacked and blaming me?

They say due to me using the same password on a number of sites they’ve been accessed by an unauthorised third party..

surely if someone had my password they’ve could order lots of pizza but wouldn’t be able to pay for it using my Apple Pay?

this surely doesn’t warrant a information commissioner’s office report to be made by them

I don't read that as blaming you at all. They are simply explaining that this is one way account breaches happen and why they're resetting your account

I wouldn't use that link though just in case the email is dodgy. I'd go to the actual dominos website and reset your password from there

They are not blaming you. The number is for Domino’s - I looked it up.

Any breach of data should be reported to the ICO and customers should also be informed. When they say “small” it could still be thousands. AThey are following protocol.

Yeah I’m not clicking on the link. It does use my actual name

it just seems the 2nd paragraph is unnecessary and as I said someone using my password, which is password123, does not warrant them reporting it to the ICO

There’s no way that every website that some random logs on with my password reports it to the ICO. someone has accessed the dominos information not just mine, or other peoples accounts due to lazy passwords

I don’t think you understand what the email says or what they mean at all 🫣

I don't read it as blaming you unless you have used the same password across several sites. That's been a message for years, use a different password for each site to reduce the likelihood of being hacked/scammed.

My password app says my domino password is strong, long, difficult to guess and is unique.

i get I might have been wound up by the mail from domino's (been a long week) but I don’t understand the ICO report

I was proper hacked following a breach at my old accountants that caused me years of pain so am over sensitve

Hi OP,
They aren't blaming you, they've clearly had some kind of hack or data breach by an outside party that has exposed your details. They have reported themselves to the ICO, not you, which is exactly what they should do in this situation

They are not reporting you to the ICO - they are reporting that their systems have been breached; they are required to do this. The point they are making to you is that your password has been used on multiple sites - one of which has been breached - and it’s the same password. You can check how widely your password has been found/ sold on https://haveibeenpwned.com/

if you are using the same email and password across multiple sites the chances of it being found are high (especially if it really is password123!). Once a hacker has access to an account, they may just want pizza, but more likely to insert malware onto the Dominos site. (Or another where you use the same Credentials). It’s not about pizza - it’s a step closer to your other, more important accounts.

why not let your iPhone generate random ones?

Yeah I absolutely get this, it’s just the 2nd paragraph that winds me up

with Ticketmaster many years ago the told us there was an actual breach and my accountant paid 12 months enhanced experian

this mail just seems very flippant

yes I know they aren’t reporting me to the ICO but trying to hide behind me using password123 for every website I access seems unnecessary in the email

Quickly checks this isn’t my mn password

They didn't write that email just to you ffs. They are telling everyone that not reusing passwords is important. It's not flippant, and it is necessary as the most common password is still 'password', years after most people should know better

@ColdAsAWitches They sent the mail to my name and have reset MY password so I have to use forgotten password next time I log on

are you telling me they did that for EVERY domino account in the uk?

Yes.

Almost certainly, yes! They know they've been hacked, so they are resetting every password so it doesn't happen again.

@catslovehairties truly honestly i’ll love to see how many people have had the same mail and that every person in the uk has to change their password

it would make me feel better after my nightmare accountant hack

Sorry... do you really think in 2026 that a multimillion pound company with hundreds of thousands of users went through their database and checked people's passwords to see who was reusing them and emailed you individually??
Catch yourself on (or put the wine down)!

Most companies don't actually store your password in a database in the way people think, these days, which is why if you forget it, they make you change it rather than sending you a reminder of what it is. They generally don't know either (or shouldn't, if they're using proper cybersecurity protocol). If Dominoes are storing it in a database that's pure stupidity on their part because tech moved on from that approach a long time ago.

Also password123 is a crap password, the type of password only a total imbecile would use, and I hope that's an example, not your real password for anything.

I also had this email. I read the 2nd paragraph as a heads up if you use the same email and passwords across other sites you could be more likely to be breached again but that’s logical. Anyway, you aren’t the only one with this email.

Thank you I did over react to the mail and then thought it was very condescending to us about not using the same password for multiple sites

thanks for the helpful comments bringing me down after my previous hacking pain, much appreciated

im off to change my passwords to password1234 so you can remind me if i forget

I get it. Having been stung before it’s understandable to react how you did. I’m trying not to reset my domino’s password as I don’t need to eat any more takeaways lol.

Thanks @Vickim03 i was annoyed domino’s thought I was stupid enough to use password123 across all my accounts, that’s what wound me up.

when my accountants was hacked they got all my limited company and business account details that are much more difficult to track for fraudulent activity. That was the nightmare

ah we all know we should cut down on takeaways but I do like the occasional domino’s despite what people will say on this thread

They have the ability to address the email to the individual even if sending it to many people.

It isn't saying that.
It is saying that SOME PEOPLE use the same password for multiple websites. Eg. They use Password123 as their password for their Tesco account, their Shein account and their Dominos account.
It is saying that somewhere there has been a breach where one of those has been hacked.
The purpose of the email is so that YOU don't get hacked. They're resetting your password to protect you.
It isn't blocking you.