Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

Applebee’s Android App Hardcoded Password Exposed Customer Data

2 sources · 2 articlesFirst reported Updated ()1
What's new

2026-11-02: Malwarebytes Labs confirms fix on October 29 and advises customers to watch for Applebee’s themed scams.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Hardcoded password in Applebee’s Android app exposed personal customer database; fixed after disclosure with no unauthorized access found.

Researcher Robert Wiggins of What Security found a hardcoded password in Applebee’s Android app that provided access to a customer database containing names, emails, dates of birth, phone numbers, ZIP codes, veteran status, login counts, account-creation dates and recent login IP addresses. The database was fixed after disclosure. Dine Brands found no evidence of unauthorized access but would not disclose how many customers were affected or how long the password existed. Customers are advised to monitor for Applebee’s themed scams.

Key facts
  • Hardcoded password in Applebee’s Android app with 1M+ Google Play downloads
  • Exposed fields include names, emails, DOB, phones, ZIP, veteran status, login history
  • No unauthorized access detected by Dine Brands
  • Issue fixed after October 29 disclosure
  • 8.5 million rewards members as of last year
  • No customer notification mentioned by company
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 29, 2026Database fixed after researcher disclosure · Malwarebytes Labs
  2. Oct 30, 2026TechCrunch reports hardcoded password exposing customer database · TechCrunch
  3. Nov 2, 2026Malwarebytes Labs reports issue and scam advice · Malwarebytes Labs

What each outlet adds

beyond the shared facts
  • Malwarebytes LabsConfirms fix on October 29 and scam warnings for customers
  • TechCrunchDetails exposed fields and 8.5 million rewards members
Vendors
Dine BrandsApplebee's
Products
Applebee’s Android appAndroid app
Victims
Applebee’s
Organizations
What Security
Countries
United States

Coverage

oldest first · one row per article · UTC
  1. · 3d ago TechCrunch · SecurityFirst report

    Applebee’s Android app held a database password exposing customer data

    Dine Brands says it found no unauthorized access, but would not say whether database logs exist.

  2. · 11h ago Malwarebytes Labs

    Applebee’s customer data exposed due to hardcoded database password

    Researcher found hardcoded password in Applebee’s Android app exposing customer database with personal details; company fixed the issue after disclosure.