McDonald's Job Application Data Breach Exposes 64 Million Applicants
By
samwcurry
Hand-rolled, kettle-boiled, baked to perfection. Worth every minute at the bakery.
Summary
A vulnerability in the McHire chatbot used by McDonald's franchisees exposed over 64 million job applications, including personal data and test results. The flaw allowed access to applicants' names, resumes, contact details, and personality assessments.
Key quotes
· 3 pulledProspective employees chat with a bot named Olivia, created by a company called Paradox.ai, that collects their personal information, shift preferences, and administers personality tests.
During a cursory security review of a few hours, we identified two serious issues: the McHire administration interface for restaurant owners accepted the default credentials 123456:123456, and an insecure direct object re
We discovered a vulnerability that could allow an attacker to access more than 64 million job applications. This data includes applicants' names, resumes, email addresses, phone numbers, and personality test results.
You might also wanna read
Trump Mobile fails to deliver phones, leaks customer data including emails and addresses
The Trump Organization's "Trump Mobile" venture has failed to ship phones to most customers who paid $100 deposits a year ago, while simulta
abovethelaw.com·2d ago
Security Flaw in ChatGPT for Google Sheets Enables Data Exfiltration via Prompt Injection
OpenAI's ChatGPT extension for Google Sheets, which has over 185,000 downloads in less than a month, is vulnerable to indirect prompt inject
promptarmor.com·14h ago
Carnival Corporation data breach exposes personal information after social engineering attack
Carnival Corporation experienced a data breach in April 2026 where a hacker used social engineering tactics to trick an employee into granti
bit.ly·2d ago
Trump Mobile investigates data leak exposing customer names and contact details
A potential security flaw on Trump Mobile's website may have exposed personal information (names, emails, addresses, phone numbers) of thous
independent.co.uk·4d ago
Personal Health Records Are the Most Valuable Stolen Data at $300 Per Record, Study Finds
Security researchers analyzed 348 real data breach listings from dark and clear web marketplaces (2008-2026) to determine the most valuable
flare.io·5d ago
Hiro launches as an automated security fix tool for fast-shipping startups
Hiro is a new security automation tool for startups that ships security fixes directly rather than just providing a dashboard of tasks. It i
Product Hunt·12d ago