The simple password for AI Chatbot ‘123456’ is exposed to exposing the personal data of millions of applicants in McDonald’s work

Security researchers found that they can access the personal information of 64 million people who applied for a job in McDonald’s, in a large part of it by logging into the job employment job in the company with the username and password “123456”.

Ian Carol Wissam Carrey He wrote in a blog post That “during a quick security review for a few hours”, they found the password problem and another Simple security vulnerability In the interior application programming interface, which allowed access to applicants to work with Chatbot, called Mchire, presented to McDonald’s by Paradox.ai.

The personal data in the researchers included the names of applicants, email addresses, home addresses and phone numbers.

Paradox.ai He wrote in a blog post It is a solution to the issues “within a few hours” after the researchers’ report, and that “no candidate information on the Internet or available to the public has been leaked.”

Researchers results It was first reported by WIRED.