Security researchers Sam Curry and Ian Carroll uncovered a vulnerability in McDonald's hiring portal, McHire, exposing 64 million applicant records. They accessed the backend using the default password "123456" and found personal data linked to chat logs from the AI chatbot, Olivia. Paradox.ai, the software developer, confirmed the issue and has since resolved it while planning a bug-bounty program. McDonald's termed the situation "unacceptable" and is reinforcing data protection standards with suppliers.
Security researchers Sam Curry and Ian Carroll uncovered a vulnerability in McDonald's hiring portal, McHire, exposing 64 million applicant records. They accessed the backend using the default password "123456" and found personal data linked to chat logs from the AI chatbot, Olivia. Paradox.ai, the software developer, confirmed the issue and has since resolved it while planning a bug-bounty program. McDonald's termed the situation "unacceptable" and is reinforcing data protection standards with suppliers.