Applebee's fixes hardcoded-key flaw that reportedly exposed customer data
- Status
- Corroborated, not yet confirmed by the vendor
- Kind
- Vulnerability
- Vendor
- Applebee's
- Product
- Applebee's Android app
- First seen
Summary
Applebee's has fixed a security lapse that reportedly exposed customers' names, email addresses, and phone numbers, according to a report by Zack Whittaker. A security researcher found that a key for the company's internal members' database was hardcoded into its Android app.
If you use Applebee's
Watch for unsolicited emails, texts, or calls that reference your Applebee's account and do not click links in them
Change your Applebee's account password and any other password reused from it
Contact Applebee's to ask whether your data was exposed and what it is doing about it
Enable multi-factor authentication on your Applebee's account if it is offered
Timeline
- Made public by Zack Whittaker on Bluesky
- First seen by cve.now
What the sources say 1
· Zack Whittaker on Bluesky: “NEW: Applebee's fixed a security lapse that exposed customers' personal data — names, email addresses, phone numbers, etc.” Source