Wyndham confirms it exposed hotel customer data after expert finds flaw in app security
- Wyndham’s Android app exposed customer data and login tokens through hardcoded credentials embedded in the code
- Researchers found access to millions of records, including names, emails, member IDs, and active authentication tokens
- Wyndham fixed the issue after disclosure, but the scope of exposure and any prior access remain unclear
Wyndham Hotels & Resorts, one of the world’s largest hotel chains, has admitted it experienced an embarrassing cybersecurity incident that exposed personally identifiable information and even mobile app login tokens, possibly for millions of people.
The hotel confirmed the news to TechCrunch after an independent researcher tipped off the publication about the security mishap.
Security researcher Robert Wiggins from What Security analyzed Wyndham’s Android app and found a set of hardcoded credentials. Those are credentials that are baked into the app’s code and are usually a leftover artifact from earlier development phases. While building an app, software developers would include...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
