Security researchers have discovered a flaw in the McHire AI platform that could have exposed the confidential data of 64 million McDonald's job applicants.
Security researchers have discovered a flaw in the McHire AI platform that could have exposed the confidential data of 64 million McDonald's job applicants.
This flaw was discovered by security researchers in late June 2025. The problem was the password “123456” and a security vulnerability in an internal API. This allowed access to past conversations of job candidates with a chatbot called McHire, provided to McDonald's by Paradox.ai, TechCrunch writes .
The personal data the researchers saw included candidates' names, email addresses, home addresses and phone numbers.
Paradox.ai wrote in a blog post that it resolved the issues “within hours” of the researchers’ report, and that “no candidate information was ever leaked online or made publicly available.”
