SecurityFan score 4 · Tier D
Hotel giant Wyndham exposed customer data after app security lapse
TechCrunch · By Zack Whittaker ·
The Brief
- Wyndham left a hardcoded credential in its customer app, letting anyone access customer data, according to TechCrunch.
- Wyndham would not say whether it can check for past unauthorized access.
- The report is based on an exclusive TechCrunch story; no further details are given in the sources.
Why it matters
Hardcoded credentials shipped inside client apps can be extracted by anyone and used to reach backend customer data, so developers should avoid embedding secrets in distributed apps.
Who’s affected
- Wyndham customers using the Wyndham customer app
- #security
- #data-exposure
- #hardcoded-credentials
- #mobile-apps
- #hospitality
Exclusive: Wyndham left a hardcoded credential in its customer app, allowing anyone to access customer data. The hotel giant wouldn't say if it has the ability to check for any past unauthorized access.
Timeline
TechCrunch reports that Wyndham exposed customer data via a hardcoded credential in its customer app
TechCrunch
Hotel giant Wyndham exposed customer data after app security lapse