HOW I HACKED MCDONALD'S (THEIR SECURITY CONTACT WAS HARDER TO FIND THAN THEIR SECRET SAUCE RECIPE)

Summary from the TLDR InfoSec newsletter

The author of this post uncovered several vulnerabilities at McDonald's, like weak app and portal security, exposed API keys, and user data leaks. Despite attempts to report the issues, finding someone to listen was nearly impossible—the process required calling HQ and guessing employee names. Most bugs were fixed once reported, but communication and security practices at McDonald's were deeply flawed.