McDonald's urges users in India to update app as 2.2 million allegedly affected by data leak

McDonald's has urged users to the McDelivery app in India to update it after an independent security firm alleged that personal and sensitive data of around 2.2 million users was being leaked. The fast food giant tweeted a statement on Sunday (18 March) and said, "...our website and app does not store any sensitive financial data of the users like credit card details, wallets passwords or bank account information."

However, the company did not deny nor confirm the data leak. Security firm Fallible claimed that it had contacted McDonald's about discovering the alleged security flaw on 4 February and received an acknowledgment on the issue from the fast food giant's Senior IT manager on 13 February. However, the security firm pointed out that the issue was not fixed until it reported the issue on 18 March on Medium.