Applebee’s customer data exposed due to hardcoded database password
Original title: Applebee’s customer data exposed by password left in app
Researcher found hardcoded password in Applebee’s Android app exposing customer database with personal details; company fixed the issue after disclosure.
A researcher discovered a hardcoded credential in the Applebee’s Android app that granted access to an internal customer database containing names, emails, phone numbers, and other personal information. The database was fixed after the researcher disclosed the issue to the company. No evidence of unauthorized access was found, but customers should monitor for scams.
Unconfirmed: No evidence of unauthorized access found but investigation ongoing
- Database fields include names, emails, DOB, phone, ZIP, veteran status
- Fix confirmed by Applebee’s on October 29
- TechCrunch helped in disclosure process
- Customers advised to watch for Applebee’s themed scams
Impact: exposure of personal customer data
- 1.Monitor for targeted scams using personal details
- Vendors
- Applebee'sDine Brands
- Products
- Android app
From the original article
2 min read at malwarebytes.comA researcher found an embedded password in Applebee’s app that exposed customer data.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.