McDonald's McHire AI Recruitment Platform Reportedly Exposed Data of 64 Million Applicants via Default Login and API Vulnerability
Date: 2025-06-30
Affected: Mcdonald's, Paradox.ai
Attack vector: data-exfiltration
Category: real-world
Severity: Critical

AI Incident Database (AIID) entry #1179: McDonald's McHire AI Recruitment Platform Reportedly Exposed Data of 64 Million Applicants via Default Login and API Vulnerability. Alleged deployer/developer: Mcdonald's, Paradox.ai. See the linked AIID entry for full narrative, sourcing, and classification.


Mitigations:

Architectural layers (MAESTRO):