Researcher reports Applebee's app exposed customer data via hardcoded database password
- Status
- Corroborated, not yet confirmed by the vendor
- Kind
- Breach
- Vendor
- Applebee's
- Product
- Applebee's mobile app
- First seen
Summary
According to TechCrunch, a security researcher found a hardcoded database credential in the Applebee's app that allowed unrestricted access to customers' personal data. The report is an exclusive from TechCrunch's security coverage and does not state how many customers were affected or whether the data was accessed by others.
If you use Applebee's
Change your Applebee's account password and do not reuse it elsewhere
Watch for phishing messages that reference Applebee's orders or rewards
Ask Applebee's whether your personal data was exposed and what it is doing about it
Update the Applebee's app to the latest version once a fix is released
Timeline
- Made public by TechCrunch Security
- First seen by cve.now
- Posted on X by cve.now1 day
- Record last updated
What the sources say 3
· TechCrunch Security: “A security researcher discovered the hardcoded credential in Applebee's app, allowing unrestricted access to customers' personal data.” Source
· Mastodon: “EXCLUSIVE: A security researcher discovered the hardcoded credential in Applebee's app, allowing unrestricted access to customers' personal data.” Source
· Mastodon: “Applebee ’s exposed customers’ personal data after leaving database # password in app” Source