techcrunch.com
Hotel giant Wyndham exposed customer data after app security lapse
Wyndham, a major hotel and resort operator, disclosed a cybersecurity breach after security researcher Robert Wiggins uncovered a hard‑coded password in the company’s Android app. The credential granted access to a Salesforce‑hosted database containing millions of customer records, including names, emails, member numbers, and login tokens. Wyndham revoked the exposed credential immediately and reported no evidence of unauthorized access. The company declined to disclose whether it would notify affected customers or file a regulatory notice. [...]