Chatbot used by McDonald's to hire workers leaked data for 64 million people after researchers guessed system password was '123456' — once inside, a second flaw turned up 'every chat interaction [from anyone who] ever applied for a job at McDonald’s'

tomshardware - A pair of security researchers has revealed vulnerabilities in the McHire chatbot Olivia, developed by Paradox.ai for McDonald's, that could have been exploited to reveal personal information about roughly 64 million people.

#cybersecurity #dataprivacy #infosec #chatgpt

'123456' password exposed info for 64 million McDonald’s job applicants

7 months / bleepingcomputer / Lawrence Abrams

7 months / bsky / @zackwhittaker.com / zackwhittaker.com

AI chatbot’s simple ‘123456’ password risked exposing personal data of millions of McDonald’s job applicants

7 months / bsky / @techcrunch.com / techcrunch.com

AI chatbot’s simple ‘123456’ password risked exposing personal data of millions of McDonald’s job applicants

7 months / techcrunch / Lorenzo Franceschi-Bicchierai

Bug Hunters Gain Access to 64 Million McDonald’s Job Applicants’ Info by Using the Password ‘123456’

7 months / gizmodo / Lucas Ropek

Chatbot used by McDonald's to hire workers leaked data for 64 million people after researchers guessed system password was '123456' — once inside, a second flaw turned up 'every chat interaction [from anyone who] ever applied for a job at McDonald’s'

7 months / tomshardware

Back to Top / Friday, July 11, 2025, 8:21 am / permalink 9861 / 6 stories in 7 months

Related Stories

Cisco Discloses Data Breach Following Sophisticated Vishing Attack / 7 months

Ahold Delhaize data breach exposes 2.2M users’ sensitive data / 8 months

Lee Enterprises faces significant data breach fallout / 9 months

Discord data breach vendor dispute clarified / 4 months

ChatGPT exploited to swipe Gmail data amid urgent patch update / 5 months

Insight Partners ransomware breach exposes thousands’ data / 5 months

Salesloft GitHub Breach Exposes Customer Data / 5 months

NorthFeed Inc.

Disclaimer: The information provided on this website is intended for general informational purposes only. While we strive for accuracy, we do not guarantee the completeness or reliability of the content. Users are encouraged to verify all details independently. We accept no liability for errors, omissions, or any decisions made based on this information.