Ongoing

  1. ElectionsHot
  2. US mid-termsHeating up
  3. AICooling
Newsbrief

Applebee's fixes app flaw that exposed customer data

Published

A researcher found a hardcoded database password in the Applebee's Android app, which has more than a million downloads on Google Play. Parent company Dine Brands says it has not found evidence of unauthorized access.

Robert Wiggins, a researcher at What Security in the United Kingdom, found the password in the app's code. The database held customer names, emails, dates of birth, phone numbers and other data. Wiggins said an attacker could also have used the password to change customer data.

Dine Brands, which owns Applebee's, said its security team started an investigation. A spokesperson said the team has not currently found evidence of unauthorized access.

Applebee's had at least 8.5 million rewards members as of last year.

Key facts

Who
Applebee's (restaurant chain whose app contained the credential); Robert Wiggins (British researcher at What Security who found the credentials); Dine Brands (company that owns Applebee's, said it launched an investigation)
What
According to the headline and description, Applebee's exposed customers' personal data after leaving a database password hardcoded in its app, which a security researcher discovered. The description says this allowed unrestricted access to customers' personal data.
When
30 October 2026
Status
Reported

Elections Hot

What you need to know

Voting in the 2026 Local Government Elections is under way at 23,696 stations, and the Electoral Commission of South Africa (IEC) reported a smooth start on 4 November. Stations opened at 7am and close at 9pm, and by 10am preliminary figures showed 3,523,691 voters had cast ballots.

There were problems: unused ballot papers were stolen from Mnyameni Secondary School near Durban, police opened a case, and the IEC relieved the station staff of duty. Some voters in Tshwane said they were turned away for wearing party shirts, but the IEC denied this and said only mayoral candidates' entourages were barred.

ANC chairperson Gwede Mantashe told members not to query the results or discredit the IEC, while the IEC said false online claims show routine procedures as fraud.

  1. IEC dismisses MK Party worry about dead people on voters' roll
  2. IEC says local election voting went largely smoothly
  3. IEC says about 12 million had voted by 5pm

See every update

US mid-terms Heating up

What you need to know

Democrats won back both the US House and Senate in the midterm elections held on 3 November, according to media projections. Exit polls showed voters were angry about high prices and the direction of the country, and rebuked President Donald Trump.

Before the vote, US forces struck targets on Qeshm Island in Iran, while Republicans struggled to defend the war against Iran on the campaign trail. Iranian officials said US voters rejected the war, and Tehran stayed on high alert for possible new US strikes.

Markets reacted, with the dollar hitting a one-month low and the rand firming to around R16.55, as analysts pointed to fears of gridlock in Washington.

  1. Iran welcomes Democratic wins in US midterm elections
  2. Democrats win US Congress in midterm vote, projections show
  3. Ramaphosa wants US trade deal after AGOA suspension

See every update

AI Cooling

What you need to know

Nvidia has told its cloud computing clients to sell at least 51% of their services to non-Chinese companies, according to five people with knowledge of the matter. Anthropic said it has committed to spend close to $900bn on AI infrastructure, and that its computing costs are rising faster than its revenues.

Elsewhere, reports from unnamed sources say OpenAI's latest funding round is falling short of expectations, and a judge let the NAACP pollution case against xAI proceed. In South Africa, the VAST AI investment scheme went offline on 30 October after withdrawals marked approved did not arrive, according to a news investigation.

  1. Accenture faces accusations over AI report with false citations
  2. CrowdStrike to buy two AI security startups
  3. Google lets schools turn off AI tools but limits Search

See every update