McDonald's India App 'leaks' customer data for more than 2.2 million users

McDonald's

McDonald's

A poorly configured server gave anyone access to the names, emails, home addresses and phone numbers of users, said Fallible.

McDonald reacted with, "Our site and application don't store any delicate monetary information of clients like Credit card subtle elements, wallet passwords or financial balance data".

McDonald's India said it had fixed the app and urged users to install the updated version.

McDonald's further wrote, "The website and app have always been safe to use, and we update security measure on a regular basis".

In an update to the report on hackernoon, Fallible has reported that McDonalds replied to them that the issue had been fixed; but they said, "he McDonald's fix is incomplete and the endpoint is still leaking data".

Update: McDonald's India commented on the issue with the following statement advising customers to update their app.

Qualcomm's 205 Mobile Platform (sigh) brings 4G and VoLTE to cheap mobiles
Now, these chips will find their way inside future feature and flip phones and in regions where there is no LTE support. The telecommunications equipment company announced the update, titled the Qualcomm 205, in New Delhi, India, on Monday.

The report blames an unprotected publicly accessible API endpoint that can be coupled with a series of numbers that act as customer IDs that can be used to obtain access to all users' personal information.

A post on independent blog post hackernoon claimed that McDonald's India is leaking data of 2.2 million users.

McDonald's operations in India are split into two entities - McDonald's India (West & South) and McDonald's India (North & East), and the McDelivery app and website are owned and operated by the former entity.

Popular fast food restaurant chain McDonalds or McD as we say is under the radar for data leaks in India.

It claimed to have uncovered "more than 50" instances of data leaks at Indian firms. If such an option is not present, it would help to contact McDonald's India to take suggestions on the next course of action. "We have communicated this again to them and are waiting for their response".

India often suffers from poor data protection and privacy laws, meaning online sites, apps and services are often much more poorly protected than in the UK.

Recommended News

  • Federal Bureau of Investigation  and National Football League  security locate Tom Brady's Super Bowl LI jersey

    Federal Bureau of Investigation and National Football League security locate Tom Brady's Super Bowl LI jersey

    The report says Brady's Super Bowl XLIX jersey from two years ago was taken by the same person who took the Super Bowl LI jersey. Six weeks also passed since Brady's Super Bowl jersey was stolen by someone in the Patriots locker room.

    North Korean leader acting very badly: Donald Trump

    The United Nations forbids North Korea from conducting long-range missile tests, but allows its satellite program for peaceful use.
    Six Nations 2017: England will have more setbacks - Eddie Jones

    Six Nations 2017: England will have more setbacks - Eddie Jones

    We are Six Nations champions, back-to-back which is a fantastic achievement. "That would have brought its own pressure". Ireland also brought an end to New Zealand's winning run at 18 past year in Chicago.
  • Ranbir and Mahira spotted together and we can't keep calm

    Ranbir and Mahira spotted together and we can't keep calm

    The Global Teacher Prize ceremony organised by the Varkey Foundation was attended by many celebrities. It appears like Mahira is pleading to Ranbir as well as the Kapoor lad appears besotted.

    Aussies slip to 4-83 in search of draw

    Led brilliantly by Shaun Marsh and Peter Handscomb, Australia has held on for a stunning draw in the third Test against India. The pair shared a 199-run stand as the touring attack failed to take a wicket in either the morning or afternoon sessions.
    City hit back to earn a draw with Liverpool

    City hit back to earn a draw with Liverpool

    If we do it, that's a success, and if we don't we will be disappointed but we will not stop working or believing in this project". To get a point at Manchester City for (any) team in the world is absolutely OK.
  • Local BSP leader shot dead in UPs Allahabad district

    Local BSP leader shot dead in UPs Allahabad district

    The incident has led to heightened tension in the area and Shami's supporters sat in protest on the Allahabad-Pratapgarh highway. The Police have registered a case against three people after a complaint by Mohammad Shami's family.

    Simon Mignolet delivers Twitter verdict after Liverpool draw v Manchester City

    Guardiola said City's enterprising display, so soon after their disappointment at Monaco, made it "one of (his) happiest days as a manager".

    Kim Jong-un is behaving 'very, very badly' says Donald Trump

    North Korean leader Kim Jong Un ordered the start of the test and oversaw it from an observation post, the KCNA reported. That was a clear warning to China and suggests that the regional situation is fast headed for a historic turning point.
  • Premier Oil PLC (PMO) Receives GBX 89.50 Consensus Target Price from Analysts

    Premier Oil PLC (PMO) Receives GBX 89.50 Consensus Target Price from Analysts

    In other news, insider Lucinda Riches acquired 5,000 shares of the business's stock in a transaction on Tuesday, December 20th. The shares were acquired at an average cost of GBX 917 ($11.21) per share, for a total transaction of £44,263.59 ($54,118.58).
    Trump job approval hits new low

    Trump job approval hits new low

    ET, Trump's approval rating has sunk to 37 percent, while those who disapprove of the president's job stands at 58 percent. Barack Obama's approval ratings averaged in the low 50s throughout his presidency.
    Armenia ranked 121st in World Happiness Report 2017

    Armenia ranked 121st in World Happiness Report 2017

    Notable mentions include the United States at 14, Britain at 18 and the South American nation of Chile at 20. But at a certain point extra money doesn't buy extra happiness, Helliwell and others said.

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.