McDonalds data breach leaves customer and employee data at stake

McDonalds is one of the largest fast-food organizations in the world and it has become a victim to a data breach when cyber criminals breached their network and systems to ex-filtrate employees and customers data. It is believed the data stolen belongs to people from the US, Taiwan and South Korea.

McDonalds’s data breach statement

McDonalds has stated that the hackers breached into various markets across the world and it has started an investigation into it. As per WSJ, the company spokesperson also mentioned that the attackers have only breached into the business contact info of the people and none of their payment card details were compromised, however, the threat actors have their hands-on names, emails, addresses and phone numbers of South Korean and Taiwanese.

It also said that based on further details, we will notify the data regulators and customers whose data has been compromised. McDonald’s is currently intimating its other branches and distribution networks about the incident, it will take further steps as per data regulatory norms and procedures to notify everyone. McDonalds data breach is another warning sign for end-user across geos to ensure they recheck their PII details.

Below is a statement from McDonalds,

“McDonald’s understands the importance of effective security measures to protect information, which is why we’ve made substantial investments to implement multiple security tools as part of our in-depth cybersecurity defense. These tools allowed us to identify quickly and contain recent unauthorized activity on our network. A thorough investigation was conducted, and we worked with experienced third parties to support this investigation” — McDonald’s

McDonalds and its history of security incidents

McDonalds became a victim to a security incident already in 2017, when there was a cross-site-scripting vulnerability that allowed hackers to penetrate and lay their hands on customers information including login credentials.

The exact modus operandi of the attack is yet to be identified, and once there are further details on this The Cybersecurity Times will keep you posted.

Subscribe to our newsletter for daily alerts on cyber events, you can also follow us on Facebook, Linkedin, Instagram, Twitter and Reddit.

You can reach out to us via Twitter or Facebook, for any advertising requests.