McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data To Hackers

An anonymous reader has shared a report from Wired detailing the security vulnerabilities of McDonald’s AI hiring bot, Olivia, which was developed by Paradox.ai. The incident involved the exposure of millions of applicants’ data, highlighting critical flaws in the platform’s security. Security researchers Ian Carroll and Sam Curry discovered that attackers could access the platform by guessing default passwords like ‘123456,’ leading to the exposure of 64 million records. This includes personal details such as names, email addresses, and phone numbers. Paradox.ai admitted to the security shortcomings and is taking steps to rectify the issue, including launching a bug bounty program. McDonald’s also held Paradox.ai accountable for the breach and emphasized the importance of data protection.