Applebee's exposed customers' personal data with database password in app

Applebee's has fixed a flaw in which a hardcoded database credential in its Android app exposed customer records, TechCrunch reported. Researcher Robert Wiggins found it with AI help, and TechCrunch says it confirmed access using a dummy account. The data included names, emails, birth dates, phone numbers and login IP addresses. Dine Brands says it found no evidence of unauthorized access, but did not say whether logs exist, how many customers were affected, or how long the credential was present. Neither company offered a way to report security issues.