“Electric bikes are for cheaters” is the refrain sung by cocksure men in lycra, worried their weekend hobbies will be invaded by unfit neophytes on battery-powered gravel, mountain, and road bicycles.
Technology
Electric bikepacking: lessons learned over four days and 250 miles
It reminds me of the early internet when AOL users were considered inferior to the online elite who did the hard work of subscribing to a regional ISP. Back then, losing an argument with an aol.com email address was reason enough to sell your modem. Now, the ultimate humiliation is being overtaken by someone in street shoes casually pushing a throttle.
But make no mistake, electric sport bikes are becoming increasingly common on trails and roads, just as electrics are slowly replacing regular bicycles in cities around the world.
To understand the appeal, I decided to pick just one electric sport bike — the Specialized Turbo Creo 2 Comp — to test on steep asphalt, rutted trails, loose gravel, mud, sand, and some green mushy stuff that smelled of doom. And to truly test its limits, I loaded the bike down with an absurd 50 pounds (23kg) of gear for a four day e-bikepacking trip.
And to test the performance of the e-bike, I was joined by an avid roadie who is currently training to ride over 800 miles (1,300km) from Amsterdam to Venice, Italy. He’s not only 10 years younger than me — he’s also fitter and carried just half the weight on his acoustic road bike.
What follows is my e-bikepacking experience over nearly 150 miles (400km) and 4,265 feet (1,300m) of elevation change. It covers my evolving charging strategy, favorite gadgets and bike gear tested, and lessons learned from over 600 miles (1,000km) of in-the-saddle testing.
Spoiler: I’m not a convert, but I can appreciate how e-bikes make cycling sports accessible to more people, even bikepacking if you live in the right places.
Charging
The Veluwe is a sprawling forest system in the heart of the Netherlands, rich in woodlands, heath, and wetlands divided by sandy hills cut by glaciers. It’s not a place you’d expect to find an extensive network of e-bike chargers. Yet, I found them to be so plentiful on my four-day trip that I was able to shed my initial range anxiety.
Each of the three campsites I stayed at cost around €10 to €15 (about $11 to $16) per night and offered free e-bike charging. The charging facilities ranged from a luxurious covered garage — important for keeping the charging brick dry when it rains — to a simple extension cord that snaked out of a solar-powered tent.
Wild camping away from official sites — which isn’t allowed in the Netherlands — would have made the charging logistics more difficult. But it was certainly possible: three of the four cafes I randomly stopped at during the tour offered free public chargers run by companies like Ion and Laad.
The Specialized e-bike I rode (more on that later) takes about 3.5 hours to fully charge both the main battery and one range extender using the included 164W (54.6V/3A) charging brick. My days would usually end with about 20 percent (out of 150 percent) of battery power remaining, which would have meant scheduling three hours of charging breaks along the route had I been wild camping. That’s certainly doable if spread over multiple food stops, especially on the long summer days found in Northern Europe. Nevertheless, charging in one go each night at a campsite was more convenient and required less planning.
1/11
Frankly, I was surprised by all the charging options I found along my route — but really, I shouldn’t have been. The Dutch are rightly lauded for their bicycling infrastructure. In the last few years, e-bikes have outsold regular bikes across the Netherlands, and a new survey suggests that electric bikes are now the majority of bikes ridden. But long before VanMoof helped make e-bikes trendy for young Dutch riders, it was the over-60s you’d see being propelled along bicycle paths. These are the same people who now strap a pair of e-bikes to RVs parked at campsites in the forests. I can only surmise that this remote charging infrastructure emerged in support of boomer demand.
You might not be able to replicate my multiday e-bikepacking experience where you live, but you will eventually, especially in Europe with its shorter distances and fast rate of e-bike adoption. It’ll take a bit longer in the US with its massive scale and dominating car culture.
The bike
For this trip, I rode the $6,500 / €6,000 Specialized Turbo Creo 2 Comp drop-bar gravel / road e-bike. My European review bike was capped at a top speed of 15.5mph (25km/h) and 50Nm of torque from the company’s own 250W / 330W mid-drive motor. Buyers in the US will receive a faster Class-3 e-bike with a top speed of 28mph.
There are several reasons why I chose the Creo 2 Comp for my first e-bikepacking adventure. First, it’s lightweight for an e-bike at just 14.47kg (32 pounds) making it almost 5kg (11 pounds) lighter than DJI’s attention-grabbing electric mountain bike. Impressively, the Creo 2 Comp is just 1.3kg (almost 3 pounds) heavier than my own hardtail MTB.
The Creo 2 Comp also features multiple attachment points for all the cages and racks needed to haul lots of gear, and a front shock built into the handlebar stem that allows for 20mm of travel. That’s not a lot of dampening compared to mountain bikes, but my hands definitely benefited after several hours of daily riding over rough gravel, tree roots, and bumpy single track.
Specialized’s two-wheeler also supports healthy tire volumes, including the chunky 29 x 2.2-inch variety commonly fitted to mountain bikes. My review bike came with the company’s smaller 700 x 42 Pathfinder Pro tubeless tires. They proved to be smooth rollers on pavement and gravel and plenty capable in sections of sand and muck that stopped my friend who rode on thinner tires.
But the main reason I selected the Creo 2 Comp was for its battery expansion. The electric gravel bike features a main 320Wh battery that can be easily supplemented with $450 160Wh range extenders. Specialized sent me two extenders for a total capacity of 640Wh. The company also sent me a Y-cable for dual-battery charging.
Unfortunately, that main battery is fully integrated into the frame and can’t be removed for charging. Specialized did this to help keep the weight down. But the Y-cable can only charge the main battery and one range extender simultaneously — not two range extenders — ruining my plan to keep the bike securely by my tent while the two smaller batteries were charging elsewhere. That meant leaving Specialized’s very expensive bike and one range extender charging outside in the rain on three occasions — twice overnight, and a few hundred meters away — protected only by a lightweight lock and rain fly made from a trash bag. Not ideal.
Another intriguing feature of the Creo 2 Comp is Specialized’s smart battery control. In Smart Control mode, you can enter the distance and duration of your planned travel, and the bike will adjust the pedal assist to ensure you don’t run out of power. I ended up not using this mode for a few reasons. First, Smart Control requires tracking the ride in the Specialized app, and I didn’t want to drain my phone’s battery unnecessarily (the bike doesn’t have a USB charging port for bike computers and phones). The second reason I didn’t use Smart Control is that I was easily getting about 68 miles (110km) from the internal battery and range extender combo, even with all that gear and riding in Sport mode — Specialized’s medium setting, which nicely balances pedal assistance with battery conservation. Without all the gear, I was getting closer to 93 miles (150km) from the battery plus extender.
And let’s face it: the real reason I chose the Specialized Creo 2 Comp for the trip is that it barely looks like an e-bike. But the motor’s audible whir made it obvious to anyone nearby that I was getting an electrical assist.
Planning
For this tour, I upgraded to the Komoot Premium ($59 / year) service to access its multiday cycling trip planner. My plan started with a premade gravel tour called the Green Divide created by Erwin Sikkens, which I segmented into a custom four-day journey that extended to my home in Amsterdam. Komoot also helped me add cafes and campsites along the way. I then exported the maps to my old Garmin 530 bike computer.
When booking each campsite, I called ahead to confirm the availability of e-bike charging since I wanted to camp in the more isolated backpacking sections of the campsites, away from the busy charging poles used by all the parked RVs. Little did I know that this was a common amenity offered by every campsite I contacted in the area.
Komoot Premium also displays detailed weather reports along the route. It showed mostly tailwinds for my dates of travel allowing me to plan a quicker-than-average pace, but the rain forecast meant packing additional protection.
I brought along a $270 Spinshift jacket from Gorewear to fight back the cold wind and rain. My review jacket kept me warm and completely dry and packed down small into the jacket’s zip pocket. It fit snuggly with my arms extended on the Creo 2 Comp e-bike, especially when fully stretched into the drop-bar position. But that also meant that the stiff (thin and lightweight) Gore-Tex fabric bunched up a bit when just standing around — a tradeoff I’m always happy to make in a cycling jacket. The Spinshift performed far better than my friend’s rain jacket, which quickly filled with air (slowing him down) and caused him to overheat more frequently. The Gorewear Spinshift jacket isn’t cheap, but it’s worth the price.
If you’re in the US, you’ll also want to check if the trails along your route allow for e-bikes, especially if you’re on a fast and powerful Class-3. Europe’s less powerful pedal-assisted e-bikes have fewer such restrictions.
Baggage
The 14.47kg (32 pounds) Creo 2 Comp weighed a staggering 37kg (82 pounds) after loading it up with 1.5L of water and everything I needed for four days of camping in the rain and cold. For food, I only needed to pack breakfasts and energy snacks since lunches and dinners would be found at markets and cafes along the way.
Ironically, the heaviest items were all related to keeping the e-bike’s motor running. This included the two external range extenders, the massive charging brick, and the heavy-duty Y charging cable. I also brought along a CEE-to-Schuko adapter cable just in case I needed to charge the e-bike from one of those blue charging poles at campsites (I never did). I also never used the second range extender battery, but I was happy to have it in reserve.
To support all that weight and volume, I had to fit the Creo 2 Comp with a rack and pannier bags. For this, I chose a carbon-fiber AeroPack rack and organization system from Tailfin to review. That 50 liters of waterproof on-bike storage proved to be fantastic, albeit expensive, at nearly €1,000 (almost $1,100).
The AeroPack rack I reviewed attaches to the seat post and to an extended rear axle I had to install on the e-bike — a procedure that took about 30 minutes. Tailfin’s 16L Mini Panniers and the entire rear rack that includes an integrated 18L top bag are designed for quick attachment and detachment. That was super helpful since I wanted my gear at my tent while the bike was charging far away.
I used Tailfin’s Packing Cubes to help keep things organized inside those deep storage bags. Most of my clothes went into the 6L Cube, which fit snugly into the AeroPack top bag. All my cables and small electronics went into the 2.5L Cube, and the toiletries and microfiber towel in the 3.5L Cube. Both of those organizers went into the waterproof panniers alongside items like my trusty JetBoil camping stove I’ve had for something like 15 years. All my stored gear stayed completely dry despite three days of on-and-off rain.
The rest of the bags were my own, including two feed bags for quick access to snacks, my lock, and a water bottle; a partial frame bag for my tools and first aid kit; and a small top-tube bag for a USB battery pack, wallet, and miscellaneous items needed during the ride.
I’ve never carried so much gear on a bikepacking trip before, but I never had a motor to help carry the load, either. Still, the Tailfin bags remained firmly in place with zero sway, which has never been my experience when using those elongated saddle bags that often go limp after a bit of rough riding and end up dragging on the rear wheel.
Tailfin’s setup is totally worth the price, in my opinion.
Sleeping
The other star of the trip was the $500 Hubba Hubba Bikepack 1-Person Tent MSR sent me to review. It’s tiny and weighs only 2 pounds 1 ounce (0.9kg) but has a long list of very smart features for bikepackers. Notably, it comes in a waterproof handlebar bag / stuff sack with plenty of attachment points for add-ons. It features thick spacers that give room for the bike’s cables and a compartment for tent poles that are shorter than normal to not interfere with steering.
1/10
The waterproof and nicely ventilated tent and rainfly kept me completely dry in lots of rain, even a thunderstorm. The uniform rectangular shape made it easy to set up and provided plenty of headroom to sit upright. The Hubba Hubba tent also features plenty of internal pockets to store gear and a large vestibule outside the side entry to keep my shoes, helmet, bags, and other bits out of sight and dry while I slept. I also made good use of the internal and external clotheslines to dry my gear.
The Hubba Hubba Bikepack tent is hands down the best lightweight tent of the dozens I’ve tried over the last three decades. It’s clearly been designed by people who spend a ton of time cycling away from civilization. Still, $500 is very expensive. My friend’s $110 NatureHike Cloud tent (which I also own) is only slightly heavier, and he seemed just as comfortable and dry. You don’t absolutely need the Hubba Hubba for bikepacking — but you’re right to want it.
Rounding out my sleep gear was a very comfortable and warm $200 NeoAir XLite NXT four-season air mattress that Thermarest sent me to test. And despite measuring a thick three inches (7.6cm), it packs down small and light at 13 ounces (370g). I appreciated the WingLock Valve that let me inflate (and deflate) it quickly without exhausting myself using the included pump sack and some good ol’ Bernoulli physics.
Thermarest also sent me a down-filled Vesper 32F/0C Quilt to review; $400 for a trail blanket is expensive, but it weighs just 15 ounces (425g) and packs down into an impossibly small ball. Despite being lightweight, it was a bit too warm when falling asleep in 64 degrees Fahrenheit (18 degrees Celsius), but I was happy to have it when temps dropped down to 48F (9C) a few nights — Thermarest says the quilt’s sweet spot is around 41F (5C). It’s silky soft to the touch and stretches around the NeoAir XLite NXT to prevent slippage and drafts.
I slept reasonably well with this setup or at least as well as I do at home. But I just can’t get comfortable with any inflatable pillow I’ve tried. Someday, I’ll find the perfect pillow, but the Trekology Aluft Pro I bought on Amazon isn’t it.
Gadgets
As a nerd, I brought far more gadgets than a typical person would. That meant bringing several USB power banks along to keep everything charged over a period of four days: two 10,000mAh (40Wh) batteries and one 27,000mAh (100Wh) behemoth. That’s far more than I’d normally bring, but again, I had a motor and tons of storage.
Some gadgets I always bring with me on bikepacking trips. These include my iPhone in a QuadLock bike-mount case and my Apple Watch — both set to low-power modes. I also brought a GoPro with extra batteries that I never even used. My aging but formidable Garmin 530 bike computer provided turn-by-turn navigation. To my delight, it was able to read power, cadence, and speed data off the Specialized Turbo Creo 2 Comp after I manually added each bike sensor.
I also had to bring the little SRAM AXS battery charger that came with the bike just in case its wireless electronic shifter died. Something that nearly happened to me earlier during 370 miles (about 600km) of preparation for the trip.
Naturally, I also brought along plenty of gadgets to review.
I tested a pair of $60 Baseus Eli Sport 1 open-ear Bluetooth headphones to be sure that I could still hear everything around me. Most riders prefer bone-conducting headphones for this purpose, but I’ve never been a fan of the flat sound. With the rain-proof Eli Sport 1, I could slip on just one of the two over-the-ear slugs for the duration of the ride to hear the navigation. They’re so lightweight and comfortable that I’d forget I was wearing one by the end of the day, and it never fell off my ear, even on the roughest trails or when taking off my helmet and sunglasses. At night, I could pop on the second slug and listen to music or watch videos with real bass, though anyone nearby could hear the audio bleed into the quiet even at modest volumes. The case also kept the headphones charged for the duration of the trip despite heavy all-day usage. For the price, they proved to be outstanding, but I should note that Amazon says it’s a frequently returned product.
I also tested a pair of Milo Communicators. I’ll have a full review coming later, as these need to be tested in a few more scenarios. My first impressions are mixed. They were invaluable in finding out that my friend had fallen off his bike in a gnarly sand patch a few hundred meters behind me, but they frequently failed to clearly deliver insults and warnings when both of us were riding full out over noisy gravel, wind, grunts, and woo-hooing. We had the Milos mounted on the bikes, and that might have been too far away to properly isolate our voices (the company offers several mounting options). It’s promising tech, so more on this later.
I’ve also been testing a HoverAir X1 drone for the past few weeks. And honestly, I think I love it. It’s so easy to grab and set aloft without needing any type of controller. And like they say, the best drone is the drone you have with you, and I wasn’t about to bring a DJI drone on this trip. A full review is coming.
Last but not least is the Flextail Tiny Repeller S combination bug repellent and lantern. It kept my tent mosquito-free and well-lit at night, but I need to test it in a few more scenarios, which requires a full review. That one is coming later this summer after I test it in an RV, but so far, so good.
Truthfully, if this hadn’t been a work assignment I would have left most of my electronic devices at home. I love technology’s ability to bend nature to my will, but it can be very distracting from just living in the moment and creates a lot of charging stress where no stress should be.
Conclusion
Let’s be clear: the vast majority of people don’t need to spend nearly $10,000 on an electric bike, top-of-the-line camping gear, and premium bike bags to go bikepacking.
If you’re already moderately fit, then you’d be amazed at what you can do with a bunch of bungee cords strapped to a regular ol’ second-hand mountain or gravel bike — and you’ll never need to worry about finding a charger. You can even splurge a little on inexpensive bikepacking gear from brands I’ve used, like Naturehike and Rhinowalk.
But e-bikepacking is most definitely a thing and will become more popular as the charging infrastructure spreads to more wilderness areas around the world. That motor is a game changer, allowing for heavier loads to be carried (even trailers with pets and small kids), tall mountain passes to be flattened, and for people with lesser abilities to get outside and do more.
Notably, e-bikes can help recreational riders join their hardcore cycling partners and friends on their long weekend rides. After which, they’ll be regaled with stories full of grit, cadence, and power stats while gobbling back all those spent calories.
My e-bike allowed me to keep up with my younger and fitter riding mate — basically leveling the field. He got his training sessions in, and I got the camaraderie I was seeking. I got a solid workout in myself since European pedal assist cuts out at 15.5mph (25km/h), and we’d regularly be traveling at speeds above 19mph (30km/h) whenever things flattened out.
Despite the immense amount of fun I had on the very capable Specialized Turbo Creo 2 Comp, I won’t be trading in my trusty hardtail mountain bike for an electrified version any time soon. I still enjoy the exercise and simplicity of conquering terrain with a pure mechanical assist.
I get the urge for gravel, road, and mountain bikers to dunk on e-bike riders, but let’s not reflexively call them all cheaters. Cheating is an act of dishonesty to unfairly gain an advantage over another, and plenty of people buy electric sport bikes after an honest assessment of their own limited abilities. They give people new options for enjoying the benefits of being active and upright on two wheels, even as they get older. And that’s something we should be celebrating.
But I was definitely cheating, and I will miss listening to my friend’s exclamations anytime he fell behind on long climbs or found his little baby tires stuck in the mud or sand that I had already traversed.
To everyone else: apologies if I knocked you off the Strava segment leaderboard — you should try harder.
All photography by Thomas Ricker / The Verge
Technology
Google just leaked a first look at Android for PC in action
We’ve been waiting months for our first look at Android running on a PC in Google’s upcoming ChromeOS / Android hybrid platform, codenamed Aluminium OS. Now we’ve seen it in action, and have Google to thank for the leak.
9to5Google spotted a bug report related to Chrome Incognito tabs published to the Google Issue Tracker yesterday, including two screen recordings taken from a device running Aluminium OS. Google has now restricted access to the report, but 9to5Google managed to pull the videos first. The site also reports that the bug tracker mentioned an ALOS software version — already confirmed to be the initialism for Aluminium OS — and that the recordings came from an HP Elite Dragonfly 13.5 Chromebook.
The videos themselves — shared to YouTube by Android Authority — add further confirmation that this is Aluminium OS, listing the OS as Android 16, with a build number that matches the ALOS one mentioned in the bug report. It certainly looks like this is an existing Chromebook being used to test the upcoming ALOS experience, which Android head Sameer Samat previously said we should expect to see more from this year.
As for what we see of Aluminium, it’s very much the mashup you’d expect. The taskbar resembles ChromeOS’s, but moves the start button into the center, à la Android. There’s a status bar at the top, more like Android than ChromeOS, with familiar Android icons for battery, Wi-Fi connection, and so on. The video gives us a brief look at the Play Store, along with some split-screen multitasking, but it’s hardly a deep dive of the new OS. We might need to wait for Google to release a video on purpose for that.
Technology
Uber unveils a new robotaxi with no driver behind the wheel
NEWYou can now listen to Fox News articles!
Uber is getting closer to offering rides with no one behind the wheel.
The company recently unveiled a new robotaxi and confirmed that autonomous testing is already underway on public roads in the San Francisco Bay Area. While the vehicle first appeared earlier this month at the Consumer Electronics Show 2026, the bigger story now is what is happening after the show.
These robotaxis are no longer confined to presentations or closed courses. They are driving in real traffic as Uber prepares for a public launch later this year.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
PRIVATE AUTONOMOUS PODS COULD REDEFINE RIDE-SHARING
Uber’s new robotaxi operates on public roads in the San Francisco Bay Area as the company moves closer to offering fully driverless rides later this year. (Klaudia Radecka/NurPhoto via Getty Images)
Who is behind Uber’s robotaxi
Uber is the name most riders recognize. However, two partners handle the technology behind the scenes. Lucid Group builds the all-electric vehicle. It is based on the Lucid Gravity SUV, which was designed for long-range efficiency and passenger comfort. Nuro provides the self-driving system. Nuro also leads testing and safety validation. Together, the three companies are developing a robotaxi service that will be available only through Uber.
Uber’s robotaxi is already driving itself
Autonomous on-road testing began last month in the Bay Area. These tests take place on public streets rather than private test tracks. Nuro runs the testing program using trained safety operators who supervise each trip. The focus is on everyday driving situations such as intersections, lane changes, traffic lights and pedestrians. This stage is critical. It allows engineers to evaluate how the system behaves in real conditions before opening rides to the public.
What makes Uber’s robotaxi different
Uber’s robotaxi was designed from the start to operate without a driver. It combines electric vehicle engineering with visible autonomy features that riders can understand.
Key features include:
- A multi-sensor system using cameras, lidar and radar for full awareness
- A low-profile roof-mounted Halo module integrated into the vehicle
- Exterior LED displays that show rider initials and trip status
- In-cabin screens for climate, music and support access
- Real-time visuals that show what the vehicle sees and plans to do
- Seating for up to six passengers with room for luggage
The robotaxi runs on high-performance computing powered by NVIDIA DRIVE AGX Thor. This system handles the real-time AI processing required for autonomous driving.
A robotaxi ride that explains itself
One standout feature is transparency. Riders can see how the robotaxi perceives the road and plans its next move. The display shows lane changes, yielding behavior, slowing at traffic lights and the planned drop-off point. This helps riders understand what the vehicle is doing instead of guessing. Inside the cabin, passengers can adjust heated seats, climate controls and music. They can also contact support or request the vehicle to pull over if needed.
CAN AUTONOMOUS TRUCKS REALLY MAKE HIGHWAYS SAFER?
The all-electric Uber robotaxi, built with partners Lucid and Nuro, is now navigating real traffic without a human driver. (INA FASSBENDER / AFP via Getty Images)
Uber plans to scale robotaxis across the U.S. and global markets
Uber plans to deploy 20,000 or more robotaxis over the next six years. These vehicles will operate in dozens of U.S. and international markets. Lucid will integrate all required hardware directly on the production line at its Casa Grande, Arizona factory. Uber will own and operate the vehicles along with third-party fleet partners. Every robotaxi ride will be booked through the Uber app, just like a standard Uber trip.
How Uber is handling robotaxi safety and regulation
Safety sits at the center of this rollout. Nuro’s validation process combines simulation, closed-course testing and supervised on-road driving. The system relies on an end-to-end AI foundation model paired with clear safety logic. The goal is predictable, comfortable driving across a wide range of conditions. Uber and its partners are also working with regulators, policymakers and local governments to ensure the service aligns with public safety standards and city planning goals.
When Uber’s driverless rides are expected to launch
Uber says the first autonomous rides will launch in a major U.S. city later in 2026. The service will be available exclusively through the Uber app. Production of the robotaxi is expected to begin later this year, pending final validation.
What this means to you
If you use Uber, driverless rides may soon appear as an option. These vehicles could offer quieter trips, more consistent driving and improved availability during peak times. For cities, a shared electric robotaxi fleet could help reduce emissions and congestion. For riders, seeing how the vehicle thinks and reacts may make autonomous travel feel less intimidating.
Take my quiz: How safe is your online security?
Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com.
CES 2026 SHOWSTOPPERS: 10 GADGETS YOU HAVE TO SEE
Uber confirms autonomous testing is underway after unveiling its robotaxi at CES 2026, marking a major step toward a public launch. (INA FASSBENDER / AFP via Getty Images)
Kurt’s key takeaways
Uber’s robotaxi effort feels more grounded than many past autonomous promises. It combines a known ride-hailing platform a purpose-built electric vehicle and a self-driving system already operating on public roads. If testing continues to progress, driverless Uber rides could move from something new to something normal sooner than many expect.
Would you get into an Uber if there was no driver sitting in the front seat? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Grubhub confirms data breach amid extortion claims
NEWYou can now listen to Fox News articles!
Food delivery platform Grubhub has confirmed a recent data breach after unauthorized actors accessed parts of its internal systems.
The disclosure comes as sources tell BleepingComputer the company is now facing extortion demands linked to stolen data.
In a statement to BleepingComputer, Grubhub said it detected and stopped the activity quickly.
“We’re aware of unauthorized individuals who recently downloaded data from certain Grubhub systems,” the company said. “We quickly investigated, stopped the activity, and are taking steps to further increase our security posture.”
Grubhub added that sensitive information, such as financial details or order history, was not affected. However, the company declined to answer follow-up questions about when the breach occurred, whether customer data was involved or if it is actively being extorted.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
RANSOMWARE ATTACK EXPOSES SOCIAL SECURITY NUMBERS AT MAJOR GAS STATION CHAIN
Grubhub confirmed a data breach after unauthorized actors accessed parts of its internal systems, prompting an investigation and heightened security measures. (Michael Nagle/Bloomberg via Getty Images)
What Grubhub has confirmed so far
While details remain limited, Grubhub confirmed several key points. It has brought in a third-party cybersecurity firm and notified law enforcement. Beyond that, the company has stayed largely silent. That lack of detail has raised concern, especially given Grubhub’s recent security history. Just last month, the company was linked to scam emails sent from its own b.grubhub.com subdomain. Those messages promoted a cryptocurrency scam promising large returns on Bitcoin payments. Grubhub said it contained the incident and blocked further unauthorized emails. It did not clarify whether the two events are related.
Sources link the breach to ShinyHunters extortion
According to multiple sources cited by BleepingComputer, the ShinyHunters hacking group is behind the extortion attempt. The group has not publicly commented on the claims and declined to respond when contacted. Sources say the attackers are demanding a Bitcoin payment to prevent the release of stolen data. That data reportedly includes older Salesforce records from a February 2025 breach and newer Zendesk data taken during the most recent intrusion. Grubhub uses Zendesk to run its online customer support system. That platform handles order issues, account access and billing questions, making it a valuable target for attackers.
How stolen credentials may have enabled the attack
Investigators believe the breach may be tied to credentials stolen during earlier Salesloft Drift attacks. In August 2025, threat actors used stolen OAuth tokens from Salesloft’s Salesforce integration to access sensitive systems over a 10-day period. According to a report from Google Threat Intelligence Group, also known as Mandiant, attackers used that stolen data to launch follow-up attacks across multiple platforms. “GTIG observed UNC6395 targeting sensitive credentials such as AWS access keys, passwords and Snowflake-related access tokens,” Google reported. ShinyHunters previously claimed responsibility for that campaign, stating it stole roughly 1.5 billion records from Salesforce environments tied to hundreds of companies.
Why this breach still matters
Even if payment data and order history were not affected, support systems often contain personal details. Names, email addresses and account notes can be enough to fuel phishing attacks or identity scams. More importantly, this incident highlights how older breaches can continue to cause damage long after the initial attack. Stolen credentials that are never rotated remain a powerful entry point for threat actors.
Ways to stay safe after the Grubhub data breach
If you use Grubhub or any online delivery service, a few smart steps can reduce your risk after a breach.
1) Update your password and stop re-use
Start by changing your Grubhub password right away. Make sure you do not reuse that password anywhere else. Reused passwords give attackers an easy path into other accounts. A password manager can help here. It creates strong, unique logins and stores them securely so you do not have to remember them all.
Next, see if your email has been exposed in past breaches. Our No. 1 password manager pick includes a built-in breach scanner that checks whether your email address or passwords have appeared in known leaks. If you discover a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2026 at Cyberguy.com.
ILLINOIS DHS DATA BREACH EXPOSES 700K RESIDENTS’ RECORDS
The food delivery platform says it quickly stopped the intrusion but has not disclosed when the breach occurred or whether customers were targeted. (Leonardo Munoz/VIEWpress)
2) Turn on two-factor authentication
If two-factor authentication (2FA) is available, enable it. This adds a second step when you sign in, such as a code sent to your phone or app. Even if a hacker steals your password, two-factor authentication can stop them from getting in.
3) Watch closely for phishing attempts and use strong antivirus software
Be alert for emails or texts that mention orders, refunds or support issues. Attackers often use stolen support data to make messages feel urgent and real. Do not click links or open attachments unless you are certain they are legitimate. Strong antivirus software can also help block malicious links and downloads before they cause harm.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
4) Remove your data from people-search sites
Consider using a data removal service to reduce your online footprint. These services help remove your personal details from data broker sites that attackers often use to build profiles. Less exposed data means fewer tools for scammers to exploit.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
5) Ignore crypto messages using trusted brands
Be skeptical of any cryptocurrency offers tied to familiar companies. Grubhub was previously linked to scam emails promoting crypto schemes, which shows how often attackers abuse trusted names. Legitimate companies do not promise fast returns or pressure you to act immediately.
6) Monitor your Grubhub account and email activity
Check your Grubhub account for anything that looks unfamiliar. Watch for unexpected password reset emails, order confirmations or support messages you did not request. Attackers often test stolen data quietly before making bigger moves.
7) Secure the email linked to your Grubhub account
Your email account is the key to password resets. Change that password and enable two-factor authentication if it is not already on. If attackers control your email, they can regain access even after you change other passwords.
8) Stay alert for delayed scams tied to the breach
Breach data is often reused weeks or months later. Phishing attempts may appear long after headlines fade. Treat any future messages claiming to reference Grubhub support, refunds or account issues with extra caution.
These steps will not undo a breach, but they can limit how attackers exploit stolen information and reduce your risk going forward.
FIBER BROADBAND GIANT INVESTIGATES BREACH AFFECTING 1M USERS
Sources tell BleepingComputer the Grubhub breach is tied to extortion demands involving allegedly stolen customer support data. (Gabby Jones/Bloomberg via Getty Images)
Kurt’s key takeaways
Grubhub’s confirmation puts an official stamp on what sources have warned about for weeks. While the company says sensitive data was not affected, unanswered questions remain. As extortion-driven breaches rise, transparency and rapid credential rotation matter more than ever. What stands out most is how past compromises continue to create new risks. When access tokens live too long, attackers do not need to break in again. They simply walk back through an open door.
If companies stay quiet after breaches, how can customers know when it is time to protect themselves? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.
Copyright 2026 CyberGuy.com. All rights reserved.
-
Illinois6 days agoIllinois school closings tomorrow: How to check if your school is closed due to extreme cold
-
Sports1 week agoMiami’s Carson Beck turns heads with stunning admission about attending classes as college athlete
-
Pittsburg, PA1 week agoSean McDermott Should Be Steelers Next Head Coach
-
Pennsylvania2 days agoRare ‘avalanche’ blocks Pennsylvania road during major snowstorm
-
Lifestyle1 week agoNick Fuentes & Andrew Tate Party to Kanye’s Banned ‘Heil Hitler’
-
Sports1 week agoMiami star throws punch at Indiana player after national championship loss
-
Cleveland, OH1 week agoNortheast Ohio cities dealing with rock salt shortage during peak of winter season
-
Technology6 days agoRing claims it’s not giving ICE access to its cameras