McDonald's AI recruitment platform exposes 64 million job application records
McDonald's AI recruitment chatbot platform McHire exposed 64 million job application records. An admin password set to 123456 and flaws in the chatbot were identified as the cause of the exposure, and applicants in Australia were among those affected.
Key facts
- Affected organisation
- McDonald's
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- 64 million job application records
- Cause / method
- Use of the admin password 123456 and flaws in the AI recruitment chatbot
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It was reported that hackers who tried the password 123456 had accessed applicant data on McDonald's AI recruitment platform.
- The number of exposed job application records was put at 64 million, and it emerged that applicants in Australia had also been affected.
- McHire's admin password and chatbot flaws were identified as the cause of the applicant data exposure.
12 related reports
- McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’
- McDonald’s hiring platform exposes 64M job applications
- McDonald’s AI chatbot hacked leaving Aussie job applicants exposed
- McHire.com - McDonald's Hiring Chatbot - Leaked Data on 64 Million Job Applicants
- McDonald’s AI Chatbot Breach Exposes 64 Million Records
- McDonald’s AI hiring tool’s password ‘123456’ exposed data of 64M applicants
- McDonald’s Chatbot Recruitment Platform Exposed 64 Million Job Applications
- McDonald’s AI Hiring Tool McHire Leaked Data of 64 Million Job Seekers
- How McDonald’s AI Bot Exposed Millions of Peoples’ Data
- McDonald’s AI bot found with ‘123456’ admin password leads to leak of McHire job seekers’ data
- AI Chatbot Flaw At McDonald’s Hiring Platform Leads To Massive Data Leak
- McDonald's Breach Exposes Data of Millions of Job Applicants
Other incidents at McDonald's
McDonald's Data on 28 Million Customers Leaked
28mImpact: Information on 28 million customers
Information on 28 million McDonald's customers was leaked. The specific date, how the leak occurred and the response have not been confirmed.
Read on Cybernews ↗McDonald's employee data found in leak, seller claims 1.7 million records stolen
1.7mImpact: Signs of employee data leak; 1.7 million records according to the seller's claim
McDonald's employee information was found in leaked data. The seller of the data claimed to have stolen 1.7 million records, and the claimed scale has not been verified.
Read on Security Affairs ↗Hacker claims data theft from McDonald's, Vodafone and other firms' Azure
3.6mImpact: Claimed theft of 3.6 million records from nine companies
A data theft attack through stolen credentials targeting the Azure environments of major companies including McDonald's and Vodafone came to light. The hacker claimed to have stolen 3.6 million Azure account records. TheHatman's attack targets were later listed as nine companies, but whether the actual scale of damage was confirmed has not been revealed.
Related reports: 7 · last report →Everest claims data theft from McDonald's India business
Impact: Alleged theft of 861GB of data
The Everest ransomware gang claimed to have stolen data from McDonald's India business. The attackers put the size of the stolen data at 861GB. The actual scale of damage and the company's response have not been confirmed.
Related reports: 3 · last report →McDonald's API hacking incident
A hack targeting a McDonald's API took place. The specific timing, scale of the damage and response measures have not been confirmed.
Read on SecurityWeek ↗McDonald's sign hacked to display transgender rights message
Impact: Transgender rights message displayed on restaurant sign
A McDonald's restaurant sign was hacked to display a message about transgender rights. The restaurant's manager disclosed the hack; the exact date and response have not been confirmed.
Read on Jacksonville Journal-Courier ↗McDonald's Instagram account hacked to promote crypto scam
Impact: Attackers claim to have stolen $700,000
McDonald's Instagram account was hacked and used to promote Grimace coin. The attackers claimed to have stolen $700,000 through the crypto scam. McDonald's blocked the attack and removed the posts and the altered profile bio.
Related reports: 5 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.