Get the latest tech news
AI chatbot’s simple ‘123456’ password risked exposing personal data of millions of McDonald’s job applicants
Security researchers found two flaws in an AI-powered chatbot used by McDonald’s to interact with job applicants.
Security researchers found that they could access the personal information of 64 million people who had applied for a job at McDonald’s, in large part by logging into the company’s AI job hiring chatbot with the username and password “123456.” Ian Carroll and Sam Curry wrote in a blog post that “during a cursory security review of a few hours,” they found the password issue and another simple security vulnerability in an internal API, which allowed access to job applicants’ past conversations with the chatbot, called McHire, supplied to McDonald’s by Paradox.ai. Paradox.ai wrote in a blog post that it resolved the issues “within a few hours” after the researchers’ report, and that “at no point was candidate information leaked online or made publicly available.”
Or read this on TechCrunch
