Insight

From shutdown to $1M ARR: how EatCookJoy rebuilt after a cyberattack

In early 2025, EatCookJoy—the chef marketplace founded by Zainab Ghadiyali—had to shut the company down during a major AI-driven cybercrime attempt. No product, no platform. This is a grounded, non-speculative look at how the team rebuilt the system, protected customer trust, and crossed $1M ARR in seven months with effectively zero marketing spend.

Written by Aravind Srinivas, early engineer at Rupa Health and Founder & CEO of HyperNest Labs. This article reflects public information and operator perspective—no speculation on confidential details.

The moment everything stopped

Two weeks before a major launch window, a global crime group targeted EatCookJoy. As Zainab has shared publicly, paying ransom was a non-starter. The decision was clear but hard: shut down, protect customer data and investor capital, and rebuild from a secure foundation.

That meant treating the incident as both a security event and a product reset. The goal was not just to get back online, but to come back with a platform that could sustain national scale.

Rebuilding the marketplace: what changed under the hood

  • Hardening authentication, authorization, and data boundaries so a similar class of attack would not succeed again.
  • Replacing brittle, spreadsheet-driven workflows with durable booking, payouts, and scheduling systems.
  • Wiring analytics and observability into every critical surface so issues showed up in dashboards, not in support queues.

HyperNest's role was to act as fractional CTO for the marketplace: partner on the threat model, rebuild the core surfaces, and ensure the new system behaved like an asset in future diligence or media coverage, not a liability.

The growth curve: $550K ARR → $1M ARR with no paid marketing

As Zainab has highlighted publicly, EatCookJoy went from shutdown to roughly $550K ARR in five months, and then crossed $1M ARR in seven months—all while in beta and without paid marketing. That growth came from execution, community, and a product that made it easier for chefs to earn more while working fewer hours.

Technically, that looked like: faster booking flows, reliable payouts, and operational tooling that let the team scale hospitality, not just code. The engineering work supported a narrative where AI runs behind the scenes and humans stay at the center.

Playbook for other founders facing security crises

  • Set a non-negotiable goal around protecting customer data and investor capital, even if it means shutting down temporarily.
  • Bring in operators who can handle both incident response and long-term architecture; this is where a fractional CTO for startups changes the trajectory.
  • Use the rebuild to install the systems and analytics you'll need for future fundraising, diligence, or media coverage.

For a more structured breakdown of the engagement, see the EatCookJoy case study or talk with us about fractional CTO support and VAPT & security programs for your own marketplace.