Wyndham's Android app held a hardcoded password that exposed customer data, researcher tells TechCrunch

Why it matters

Wyndham says it has about 129 million rewards members, so a single password left in app code put a very large customer base at risk. Security researcher Robert Wiggins of What Security found the credential and said the database held millions of entries, though he could not count the exposed customer records. The database also stored login tokens that keep customers signed in. Wyndham would not say whether it has logs to check for earlier access. Watch whether it notifies customers or regulators.