McHire’s default admin password leaked data of 64 M job seekers
Security researchers discovered that McHire, McDonald’s AI chatbot hiring platform, used default admin credentials (123456/123456) and an insecure IDOR API, exposing personal data of over 64 million applicants. The vendor revoked the credentials and fixed the flaw within days, underscoring the urgent need for robust security in AI‑driven recruitment tools.