CYBERSECURITYTRACKER
Permanent story citation

Applebee’s exposed customers’ personal data after leaving database password in app

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11963

As cited

Copy frozen at (site build).

breaches incidents

Applebee’s exposed customers’ personal data after leaving database password in app

A security researcher found a hardcoded credential in the Applebee's mobile app that exposed an unsecured database containing customers' personal data. The credential was embedded in the application code, allowing unrestricted access to sensitive information.

Why it matters: Applebee's customers face identity theft and fraud risk from their exposed personal data; practitioners should audit mobile apps for hardcoded credentials and enforce secrets management.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary