TLDR InfoSec · ATTACKS & VULNERABILITIES

MCDONALD'S CHATBOT RECRUITMENT PLATFORM EXPOSED 64 MILLION JOB APPLICATIONS

securityweek.com2 min read

Summary from the TLDR InfoSec newsletter

McDonald's chatbot recruitment platform, McHire, exposed the personal data of over 64 million job applicants due to default credentials ('123456' username/password) and an insecure API. Security researchers accessed all applicant information, including names, addresses, phone numbers, and chat messages.