Hotel giant Wyndham exposed customer data after app security lapse
AI-summarised brief · reviewed before publication
Wyndham, a major hotel and resort operator, disclosed a cybersecurity breach after security researcher Robert Wiggins uncovered a hard‑coded password in the company’s Android app. The credential granted access to a Salesforce‑hosted database containing millions of customer records, including names, emails, member numbers, and login tokens. Wyndham revoked the exposed credential immediately and reported no evidence of unauthorized access. The company declined to disclose whether it would notify affected customers or file a regulatory notice.
💡 Why It Matters
- · The incident underscores the risks of hard‑coded credentials in consumer apps, a flaw that can expose vast personal data sets with minimal effort.
- · It also highlights the growing need for transparent vulnerability disclosure processes in the hospitality sector.