A year ago customers were complaning that their accounts were accounted despite using an unique password to DoorDash. DoorDash at that time denied any hacking incidents.
A more sinister explanation is that DoorDash knew back then who is leaking their data and removed their access. But chose to disclose only just now.