Last seen July 11, 2025

AI Security Incident

Evidence indicates that the affected technology is affected by a security issue.

Technical Severity

Low severity

Lifecycle Status

STABLE

Sources

1 source: csoonline.com

What Happened

Evidence indicates that the affected technology is affected by a security issue.

Why This Matters

Current evidence identifies a security issue involving the affected technology, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether the affected technology is present in your environment and review the affected configuration.

Follow this incident as it develops Material-change notifications are being prepared for BugSkan Pro.

Exposure

Recommended Response

First Seen

Jul 11, 2025 05:30

Last Seen

Jul 11, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

Credential Exposure Data Leakage

Timeline

Incident first seen
Jul 11, 2025 05:30
BugSkan first recorded this incident.
McDonald’s AI hiring tool’s password ‘123456’ exposed data of 64M applicants - csoonline.com
Jul 11, 2025 05:30
csoonline.com · Data Leak

Sources

McDonald’s AI hiring tool’s password ‘123456’ exposed data of 64M applicants - csoonline.com

csoonline.com · Jul 11, 2025 05:30

A critical security flaw in McDonald's McHire AI hiring tool leveraged default '123456' administrative credentials combined with an Insecure Direct Object Reference (IDOR) vulnerability in an internal API. This exploit allowed researchers to access and potentially expose sensitive Personally Identifiable Information (PII) for millions of job applicants, including chat histories and contact details.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.