McDonald's India App 'leaks' customer data for more than 2.2 million users

Customers in North and East of India use another app and website so their data doesn't seem to be impacted by this leak

Customers in North and East of India use another app and website so their data doesn't seem to be impacted by this leak

A poorly configured server gave anyone access to the names, emails, home addresses and phone numbers of users, said Fallible.

McDonald reacted with, "Our site and application don't store any delicate monetary information of clients like Credit card subtle elements, wallet passwords or financial balance data".

McDonald's India said it had fixed the app and urged users to install the updated version.

McDonald's further wrote, "The website and app have always been safe to use, and we update security measure on a regular basis".

In an update to the report on hackernoon, Fallible has reported that McDonalds replied to them that the issue had been fixed; but they said, "he McDonald's fix is incomplete and the endpoint is still leaking data".

Update: McDonald's India commented on the issue with the following statement advising customers to update their app.

Simon Mignolet delivers Twitter verdict after Liverpool draw v Manchester City
Guardiola said City's enterprising display, so soon after their disappointment at Monaco, made it "one of (his) happiest days as a manager".

The report blames an unprotected publicly accessible API endpoint that can be coupled with a series of numbers that act as customer IDs that can be used to obtain access to all users' personal information.

A post on independent blog post hackernoon claimed that McDonald's India is leaking data of 2.2 million users.

McDonald's operations in India are split into two entities - McDonald's India (West & South) and McDonald's India (North & East), and the McDelivery app and website are owned and operated by the former entity.

Popular fast food restaurant chain McDonalds or McD as we say is under the radar for data leaks in India.

It claimed to have uncovered "more than 50" instances of data leaks at Indian firms. If such an option is not present, it would help to contact McDonald's India to take suggestions on the next course of action. "We have communicated this again to them and are waiting for their response".

India often suffers from poor data protection and privacy laws, meaning online sites, apps and services are often much more poorly protected than in the UK.

Recommended News

  • Qualcomm's 205 Mobile Platform (sigh) brings 4G and VoLTE to cheap mobiles

    Qualcomm's 205 Mobile Platform (sigh) brings 4G and VoLTE to cheap mobiles

    Now, these chips will find their way inside future feature and flip phones and in regions where there is no LTE support. The telecommunications equipment company announced the update, titled the Qualcomm 205, in New Delhi, India, on Monday.
    Marsh, Handscomb stifle India's advantage with gritty batting

    Marsh, Handscomb stifle India's advantage with gritty batting

    Rahul and Vijay constructed a 91-run opening partnership before Pat Cummins unsettled Rahul into gloving a catch to wicketkeeper Wade.
    Kim Jong Un acting very, very badly

    Kim Jong Un acting very, very badly

    The test site is close to where North Korea launched four extended-range Scud missiles into the Sea of Japan earlier this month. South Korea's military declined to comment.
  • Brazilian Butt Lift Surgery Causes a Woman's Death

    Brazilian Butt Lift Surgery Causes a Woman's Death

    The procedure involved sucking out the fat from the other regions of the body and injecting it back into the buttock section. Only back then, the name of the center was "Encore Plastic Surgery" and it was under the ownership of a different person.
    NoKor tests new rocket engine

    NoKor tests new rocket engine

    North Korea is one of just four United Nations members not party to the Chemical Weapons Convention, which bans its use. He said the situation was at a new cross-roads with two scenarios - a deterioration to war or a diplomatic solution.
    Trump did not refuse to shake Merkel's hand

    Trump did not refuse to shake Merkel's hand

    In his statement at the start, Trump praised Germany's apprenticeship program that trains people to join the industrial workforce. The most awkward moments involved Mr Trump's repeated claims that he was spied on as a candidate by the Obama administration.
  • Sony launches new Xperia L1

    Sony launches new Xperia L1

    Since the handset doesn't really have any strong USP, the Xperia L1 will only be sold in select regions such as the Middle East. There's a 13-megapixel camera on the rear, 5-megapixel snapper on the front and it has Bluetooth 4.2 and NFC connectivity.
    USA  issues trade challenge at fraught G20

    USA issues trade challenge at fraught G20

    Its decisions don't have the same force as an worldwide treaty but depend on individual countries' promises to follow through. The G20 summit with each country's government leader will be held in July in Hamburg, Germany.
    Kim Jong-un is behaving 'very, very badly' says Donald Trump

    Kim Jong-un is behaving 'very, very badly' says Donald Trump

    North Korean leader Kim Jong Un ordered the start of the test and oversaw it from an observation post, the KCNA reported. That was a clear warning to China and suggests that the regional situation is fast headed for a historic turning point.
  • Local BSP leader shot dead in UPs Allahabad district

    Local BSP leader shot dead in UPs Allahabad district

    The incident has led to heightened tension in the area and Shami's supporters sat in protest on the Allahabad-Pratapgarh highway. The Police have registered a case against three people after a complaint by Mohammad Shami's family.
    Former Niners receiver says he has ALS

    Former Niners receiver says he has ALS

    Dwight Clark announced he has Lou Gehrig's disease and suspects playing football might have caused the illness. In 8 seasons for the 49ers, Clark totaled 506 catches for 6750 yards and 48 touchdowns in 134 career games.
    North Korea test seen as ominous development due to technical progress

    North Korea test seen as ominous development due to technical progress

    Leader Kim Jong-un declared the test "a new birth" for the North's rocket industry, state news agency KCNA said. President Donald Trump told reporters he held meetings on North Korea at the weekend at his Florida resort.

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.