Hotel giant Wyndham exposed customer data after app security lapse
Hotel and resort giant Wyndham has acknowledged a cybersecurity incident after a good-faith security researcher discovered a bug that allowed anyone to…
Summary
Hotel and resort giant Wyndham has acknowledged a cybersecurity incident after a good-faith security researcher discovered a bug that allowed anyone to access customers’ personal information. Security researcher Robert Wiggins at What Security exclusively told TechCrunch that he found a password inside the source code of Wyndham’s Android app, which granted access to an internal company database, hosted by tech company Salesforce. Wiggins told TechCrunch that the credential exposed personal information including customer names, email addresses, and Wyndham member number. The database also stores customer login tokens ( called JWTs ) that keep customers logged-in to their apps without having to repeatedly enter their own passwords.
Positives
- The report adds a new data point to the technology market.
- The development may create new product, research, or competitive opportunities.
Risks & concerns
- The article may not provide enough evidence to validate every implication.
- Execution, cost, adoption, regulation, or security could change the outcome.