Home » Tech

McDonalds India's delivery app was a golden honeypot

20 March, 2017, 16:04 | Author: Nadine Todd
  • McSecurity? a Mc Donalds restaraunt in Mumbai. Credit Reuters

McDonald's delivery app in India leaked personal information about 2.2 million users, a security firm has found.

However, there was no mention of the security breach of personal data such as phone numbers, home addresses, and social profile links.

The Indian operation of the food chain, which is owned and managed by franchisees, said in posts on Facebook and Twitter over the weekend that its website and app do not store any sensitive financial data of users.

The statement added, "As a precautionary measure, we would also urge our users to update the McDelivery app on their devices".

Hackernoon stated, "We contacted McDelivery on 7th Feb and received an acknowledgment from a Senior IT Manager on 13th Feb (33 days ago)".

However Fallible claims that this fix did not solve the over-riding issue, with the affected server still leaking data.

Statement from McDonalds India.

Untrustworthy wrote in a blog post, "An unprotected openly available API endpoint for getting client subtle elements combined with serially enumerable numbers as client IDs can be utilized to acquire access to all clients individual data".

The McDelivery app is operated by Westlife Development which oversees McDonald's restaurants in south and west India.

The company has assured its customers that its website and app do not store any financial data. It's unclear if anyone else knew about the leak and if they were able to exploit it to download data of all McDonald's India (West & South) customers.

McDonald's did not immediately comment over the weekend.

They report that they have communicated this opinion to McDonald's again, and are waiting for their response.

"The website and app has always been safe to use, and we update security measure on regular basis", the statement said.

India often suffers from poor data protection and privacy laws, meaning online sites, apps and services are often much more poorly protected than in the UK.

Recommended:

  • North Korea's Kim 'acting very, very badly'

    In a report from the Daily Star , retaliation was promised for so much as "even a single bullet" being fired into the territory of the DPRK.

    India vs Australia 3rd Test: MS Dhoni spotted at Ranchi stadium

    In the morning session, Vijay hit a gutsy 82 before undoing his hard work by being stumped off O'Keefe at the stroke of lunch . Steve Smith along with Renshaw has got Australia off to a decent start. "Pujara always backed me to play my shots", Saha said.
    Google braced for questions as more big brands pull adverts

    Google braced for questions as more big brands pull adverts

    Other businesses including Barclays are considering what to do - though Barclays does not now have any advertising on YouTube or Google.
  • NFL Manager: 70 Percent of Teams 'Genuinely Hate' Free-Agent Kaepernick

    NFL Manager: 70 Percent of Teams 'Genuinely Hate' Free-Agent Kaepernick

    After the season-long protest, the quarterback announced he would stand during the national anthem in the upcoming season. While he left NY without a contract in place, it is expected that the Jets and McCown will continue to work on a deal.
    Shaq is a believer of Kyrie Irving's flat-Earth theory

    Shaq is a believer of Kyrie Irving's flat-Earth theory

    Styles said, 'I'm not a 'flat-earther. 'I drive from Florida to California all the time, and it's flat to me. He also cites Columbus not discovering America and that there is no way China "is under us".

    Trump criticizes North Korean leader Kim

    It said the President also met with military personnel. "Let me be very clear: this policy of strategic patience has ended". Speaking in South Korea on Friday, Tillerson said that military action against the secretive state was an 'option'.
  • Qualcomm's 205 Mobile Platform to bring 4G LTE support to Feature Phones

    Qualcomm's 205 Mobile Platform to bring 4G LTE support to Feature Phones

    With the inclusion of 4G LTE into feature phones, the very concept of a "feature phone" is scheduled for a redefinition. Qualcomm 205 is a dual-core SoC which clocks at 1.1GHz and supports 4G connectivity on handsets.
    Klopp: Liverpool deserved more from City draw

    Klopp: Liverpool deserved more from City draw

    Manchester City and Liverpool played out a pulsating 1-1 draw in the Premier League at the Etihad Stadium on Sunday. Guardiola has won two Champions Leagues, six domestic titles and four cups in his stellar career.

    North Korean missile tests continue as USA strikes hardline stance

    He also said the threat posed by the regime was increasing. "Let's not forget the ideological aspect of this", Graham said. Tillerson called Japan America's "most important ally" but South Korea merely as "an important partner".
  • Brady's stolen jersey found on 'foreign soil'

    Brady's stolen jersey found on 'foreign soil'

    You may remember, Brady said he placed his jersey in a bag in the locker room in Houston. It appears the case of the missing jersey has been solved.
    Analysts At Macquarie Research Maintained Beazley PLC (LON:BEZ) As Underperform

    Analysts At Macquarie Research Maintained Beazley PLC (LON:BEZ) As Underperform

    The Company is a homewares retailer, which provides a range of products to its customer base, under the brand name Dunelm. One investment analyst has rated the stock with a sell rating and five have assigned a hold rating to the company.
    LeEco is reportedly trying to sell its Silicon Valley property

    LeEco is reportedly trying to sell its Silicon Valley property

    LeEco may not be around in the US for much longer - the company's big attempt to make a name for itself here seems to have failed. The previous month, the company had made a big splash hosting its official US launch at the Palace of Fine Arts in San Francisco.


Popular

BSP leader Mohammed Shami shot dead in Allahabad; Police initiate investigation
Mohammad Shami, a Bahujan Samaj Party leader was shot dead last night in Uttar Pradesh's Allahabad district. Police officials have said that different teams of the crime branch have been set on investigating the case.

Rand Paul says GOP health care bill unlikely to pass in Congress
Cruz said he can't vote for a bill that allows health insurance premiums to continue to rise. Ryan said there are always improvements being made until the bill is brought to the floor.

KL pursues fresh suspects in Kim Jong Nam's murder
Kim Jong-un, who tested a new type of high-thrust rocket yesterday, is misbehaving, according to Donald Trump. The report indicated that the new engine will be used for Pyongyang's space and satellite-launching program.

Germany hits back at Trump's claim it owes 'vast sums' to North Atlantic Treaty Organisation
It's only been invoked once since North Atlantic Treaty Organisation was started; that was after the terrorist attacks on 9/11. All we did was quote a certain very talented legal mind who was the one responsible for saying that on TV", Trump said .

Midlands leads of the way on house price growth
East Midlands property prices are up by 2.1 per cent this month and 5.7 per cent year-on-year - higher than any other region. The figure stands only £363 below a record high of £310,471, recorded in June past year .