DoorDash reveals that hackers stole the personal information of 4.9 million customers, workers, and merchants through a third-party service provider. The company faces questions over a five-month detection delay and previous unexplained account compromises.