GoKawiilWyndham hotel app exposed customer data via hardcoded database password
Security researcher Robert Wiggins found a password embedded in Wyndham's Android app source code that granted access to an internal Salesforce-hosted database containing customer names, emails, member numbers, login tokens, and company documents. Wiggins reported the issue to TechCrunch, which notified Wyndham; the exposed credential was revoked shortly after. Wyndham said it found no evidence of unauthorized access but did not clarify whether it has logs to verify that claim.