Wendy's data breach: 52K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2022-05-24
In March 2018, Wendy's in the Philippines suffered a data breach which impacted over 52k customers and job applicants. The breach exposed extensive personal information including names, email and IP addresses, physical addresses, phone numbers and passwords stored as MD5 hashes. Exposed data: education levels, email addresses, ip addresses, job applications, names, passwords, phone numbers, physical addresses. The breach dates from Mar 31, 2018; Have I Been Pwned loaded it on May 24, 2022.
What to do
- If you had a Wendy's account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
