Applebee's Exposed Customers' Personal Data After Leaving Database Password In App

Applebee's has resolved a security vulnerability that permitted unauthorized access to the personal data of its registered customers, following a researcher's discovery of a database password within the company's mobile application, according to information provided by TechCrunch. The renowned restaurant chain confirmed on Thursday that it had implemented measures to mitigate the security issue and avert any unlawful access to its customer database.

The compromised database encompassed a wealth of personal information, including customer names, email addresses (with indicators of email verification), birth dates, telephone numbers, ZIP codes, military status, login counts, account creation dates, and IP addresses of the latest logins, which could potentially unveil the customers' approximate geographical locations.

When queried by TechCrunch, Applebee's spokesperson declined to disclose whether the company retains server logs that could be examined to ascertain if any entity accessed the database, or if any logs exist at all. The company emphasized that its investigation is ongoing, and it will institute suitable actions grounded in its findings.

The extent of customers impacted by the data breach remains uncertain. Applebee's boasted a minimum of 8.5 million individuals enrolled in its loyalty program as of the previous year; however, the company was unwilling to disclose the precise number of customers whose personal information was exposed due to this security lapse.