Applebee's Fixes Security Flaw Exposing Customer Data

• •A hardcoded password in Applebee's Android app exposed customer data.
• •The vulnerability allowed access to sensitive information, including names and email addresses.
• •Applebee's is investigating the incident but has not confirmed unauthorized access.

Applebee's addressed a security vulnerability that exposed personal data of registered customers due to a hardcoded password found in its Android app. The flaw, discovered by cybersecurity researcher Robert Wiggins, allowed unauthorized access to an internal database containing sensitive information such as names, email addresses, dates of birth, and phone numbers. The vulnerability was confirmed by TechCrunch, which verified the findings by decompiling the app. Applebee's has not disclosed how long the password was exposed or if any unauthorized access occurred. The company stated that its investigation is ongoing. The incident highlights the importance of secure software development practices, especially for a chain managing millions of customer accounts through its rewards program.