Hotel giant Wyndham exposed customer data after app security lapse
techcrunch.com Nov 10, 2026

Hotel giant Wyndham exposed customer data after app security lapse

AI-summarised brief · reviewed before publication

Wyndham, a major hotel and resort operator, disclosed a cybersecurity breach after security researcher Robert Wiggins uncovered a hard‑coded password in the company’s Android app. The credential granted access to a Salesforce‑hosted database containing millions of customer records, including names, emails, member numbers, and login tokens. Wyndham revoked the exposed credential immediately and reported no evidence of unauthorized access. The company declined to disclose whether it would notify affected customers or file a regulatory notice.

💡 Why It Matters

  • · The incident underscores the risks of hard‑coded credentials in consumer apps, a flaw that can expose vast personal data sets with minimal effort.
  • · It also highlights the growing need for transparent vulnerability disclosure processes in the hospitality sector.