See every side of every news story
Published loading...Updated

McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’

UNITED STATES, JUL 11 – Security researchers uncovered a default password vulnerability exposing the personal data of 64 million applicants on McDonald's AI hiring platform, prompting immediate remediation by Paradox.ai.

  • On June 30, cybersecurity experts Ian Carroll and Sam Curry identified a security flaw in McDonald's AI-driven hiring system, McHire, which resulted in the exposure of personal information belonging to 64 million job seekers across the United States.
  • The flaw stemmed from weak default admin credentials of '123456' used in McHire’s chatbot backend and an IDOR bug that allowed unauthorized data access.
  • Researchers were able to access extensive conversation records, authentication tokens, and sensitive applicant information collected by Olivia, the AI chatbot responsible for screening 90 percent of job candidates at McDonald's franchises.
  • Paradox.ai and McDonald's confirmed the issue, promptly disabled default credentials, deployed a fix the same day, and initiated a system review with plans for a bug bounty program.
  • The breach highlights risks in AI hiring systems using weak security, prompting McDonald's and Paradox.ai to strengthen protections and enforce third-party accountability.
Insights by Ground AI
Does this summary seem wrong?

55 Articles

All
Left
7
Center
7
Right
2
Center

If you have conducted a job interview at McDonald's in 2025 through her chatbot Olivia, your personal data has been exposed to any curious.

·Madrid, Spain
Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 44% of the sources lean Left, 44% of the sources are Center
44% Center
Factuality

To view factuality data please Upgrade to Premium

Ownership

To view ownership data please Upgrade to Vantage

IT PRO broke the news in on Wednesday, July 9, 2025.
Sources are mostly out of (0)