McDonald's
Disclosed Jul 9, 20251 year agoUnverified
McHire AI hiring bot's "123456" password exposed 64M applicant records
Researchers logged into the admin side of McDonald's McHire recruiting chatbot, run by Paradox.ai, with the password 123456 and found an API flaw exposing data tied to 64 million job applications; Paradox.ai fixed it within hours and said data was not leaked publicly.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jul 9, 2025 |
| Attack | Exposed data |
| Data exposed | Names, Emails, Addresses, Phone numbers, Messages |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| AI chatbot's simple 123456 password risked exposing personal data of millions of McDonald's job applicantstechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jul 9, 2025 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.