McDonald’s Data Breach Exposes 64 Million Job Applicants Personal Info

In July 2025, McDonald’s faced a significant data breach involving its AI-powered hiring platform, McHire, developed by Paradox.ai. Security researchers Ian Carroll and Sam Curry discovered critical vulnerabilities that exposed the personal information of approximately 64 million job applicants. The breach stemmed from shockingly basic security flaws, including a default admin password of “123456” and an insecure direct object reference (IDOR) in an internal API, allowing unauthorized access to sensitive data such as names, email addresses, phone numbers, resumes, and chat transcripts with the AI chatbot “Olivia.”

Buzz My Biz provides a unified cybersecurity platform ideal for business, education, healthcare, and local governments. Give us a call at [phone] or schedule a meeting today .