GoKawiilApplebee's Fixes App Flaw That Exposed Customer Database Password
A security researcher discovered that Applebee's mobile app contained a hardcoded password granting access to an internal customer database, TechCrunch reported. The exposed data included names, emails, birth dates, phone numbers, ZIP codes, veteran status, login history and IP addresses. Applebee's confirmed it addressed the issue last Thursday but has not disclosed how many customers were affected.
GoKawiil's interpretation of the reporting above, not reported fact.
With at least 8.5 million customers enrolled in Applebee's rewards program, the scope of potential exposure could be significant, though the company has not confirmed actual numbers affected. Applebee's declined to say whether it retains server logs to verify if anyone accessed the data, which raises questions about how thoroughly the breach can be investigated.
- A hardcoded database password in Applebee's app exposed sensitive customer data.
- Exposed information included names, emails, birth dates, phone numbers, and login IP addresses.
- Applebee's has not disclosed the number of affected customers or confirmed if logs exist to assess unauthorized access.
Source: yro.slashdot.org, 2026-11-06
Published there as: “Applebee's Exposed Customers' Personal Data After Leaving Database Password In App”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.