Wyndham App Flaw Exposes Salesforce Database Containing Customer Data
A security researcher found a hardcoded password in U.S. hotel chain Wyndham’s Android app that exposed an internal Salesforce database with customer names, email addresses, membership numbers and login tokens. The database held millions of entries, though the number of affected records is unclear. Wyndham says it revoked the credential and found no evidence of unauthorized access.
