Breachesby GlyphMcDonald's
Disclosed Jul 9, 2025Unverified
McHire AI hiring bot's "123456" password exposed 64M applicant records
Researchers logged into the admin side of McDonald's McHire recruiting chatbot, run by Paradox.ai, with the password 123456 and found an API flaw exposing data tied to 64 million job applications; Paradox.ai fixed it within hours and said data was not leaked publicly.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jul 9, 2025 |
| Attack | Exposed data |
| Data exposed | NamesEmailsAddressesPhone numbersMessages |
| Sector | Retail · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.