Hotel giant Wyndham exposed customer data after app security lapse

A security researcher discovered a hardcoded credential in Wyndham's Android app that granted access to an internal company database, exposing customer personal information, including names, email addresses, and login tokens, as well as Wyndham files and documents. The database contained millions of entries, but the exact number of exposed customer records is unknown. Wyndham's security team was notified and the credential was revoked, but the company has not confirmed whether anyone accessed the database before the issue was discovered. Wyndham has 129 million enrolled rewards members. The company's spokesperson stated that their security teams have no evidence of unauthorized access, but did not provide further details. The spokesperson also declined to say whether Wyndham has the technical means to determine if anyone accessed the database before the issue was discovered.