Home / Technology / Applebee's App Leak: Customer Data Exposed
Applebee's App Leak: Customer Data Exposed
31 Oct
Summary
- A security flaw allowed access to customer names and contact details.
- A password for the database was found within the app's source code.
- The restaurant chain is investigating and has fixed the vulnerability.
A significant security vulnerability within the Applebee's Android mobile application has been rectified, as confirmed by the restaurant chain. The flaw, discovered earlier this month by cybersecurity researcher Robert Wiggins, involved a hardcoded credential within the app's source code. This credential granted access to the company's customer database.
The exposed database contained sensitive personal information such as customer names, email addresses, dates of birth, and phone numbers. Additional details included veteran status, login frequency, account creation dates, and IP addresses, which could indicate approximate location.
Applebee's parent company, Dine Brands, stated that their security team investigated the matter and found no current evidence of unauthorized access. The company appreciated the researcher and TechCrunch for bringing the issue to their attention and confirmed its investigation is continuing.
