Wyndham customer data exposed after hardcoded password in Android app
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
Wyndham acknowledged a breach after researcher Robert Wiggins of What Security found a password in its Android app source code that granted access to a Salesforce database holding names, emails, member numbers, login JWTs, and company files. The database held millions of entries; Wyndham has about 129 million rewards members. Wyndham revoked the credential after TechCrunch contacted it and lacks a way for outsiders to report flaws.
Continue in the app — vote & join in ➔Source: TechCrunch · via ahirlevel.hu