Applebee’s customer data exposed by password left in app
Source: Malwarebytes Labs
At a glance
Applebee’s has fixed a security flaw that exposed customers’ personal information after a researcher discovered a database password embedded in the restaurant chain’s Android app. The researcher, Robert Wiggins, found the password with help from AI . It gave him access to an internal Applebee’s customer database. A password written directly into an app’s code or configuration is known as a hardcoded credential. Anyone who extracts it may be able to use it to access the system. The exposed database contained: Names, email addresses, and email-verification status Dates of birth, phone numbers, …