[…] Grubhub said it identified an incident involving a third-party contractor in which there was unauthorized access to certain user contact …