'123456' password exposed chats for 64 million McD’s applicants

vaxvms

https://www.bleepingcomputer.com/news/security/123456-password-exposed-chats-for-64-million-mcdonalds-job-chatbot-applications/

The flaw found that the ChatBot’s admin panel utilized a test franchise that was protected by weak credentials of a login name “123456” and a password of “123456”.

HELLFIRE

"No I DO NOT want fries with my data breach! 🙄

/sarcasm

Regards

Andyross

If you aren’t careful, they can steal your air!!

antdude

Andyross Rats. You beat me to this.

Andyross

antdude I also forgot they could steal what is in your luggage, too!

Somewhat-Reticent

“chatbot named Olivia” → 🖐️🎌‼️
————————————————————————————————————————
( correction: 64M applications, not necessarily all unique applicants )

TheRogueWolf

Dah-dah, dah-dah-dah… ain’t lovin’ it.

HELLFIRE

One flew over Birdie’s nest with this cockamamie idea? Well THAT makes me Grimace!

Hamburgler got away, and Mayor McCheese ended up with egg on his face?

Someone needs to be Fried in canola oil, Battered Up in Special Sauce, and hung out to dry!

I’ll quit while I’m ahead. 🙄 🙄 🙄

Regards

HELLFIRE

https://krebsonsecurity.com/2025/07/poor-passwords-tattle-on-ai-hiring-bot-maker-paradox-ai/#more-71668 – Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai

… Those purloined credentials show the developer in question at one point used the same seven-digit password to log in to Paradox.ai accounts for a number of Fortune 500 firms listed as customers on the company’s website, including Aramark, Lockheed Martin, Lowes, and Pepsi. … Paradox.ai told KrebsOnSecurity that at the time of the 2019 audit, the company’s various contractors were not held to the same security standards the company practices internally; Paradox emphasized that this has changed, and that it has updated its security and password requirements multiple times since then. …

What’s “Ahhh F**K!” in Vietnamese? Asking for a friend…. /sarcasm

Regards