Security Affairs
Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released|Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe|CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code|U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog|Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack|Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions|Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers|NIS2 Makes Board Members Personally Liable for Access Control Decisions|Apple’s spyware notifications reach the Bundestag: what the BSI says to do now|VOLTA, the infostealer that asks an AI which victims are worth the effort|New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia|Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

95,000 job seekers affected by the McDonald’s Canada data breach

The McDonald’s Canada career website was recently subject to a cyber-attack. Hackers stole records of 95,000 job seekers. McDonald’s Canada confirmed that hackers have stolen the personal data of about 95,000 job seekers from its recruitment website. The data were provided by candidates searching for a job at McDonald’s Canada since March 2014. The company […]

95,000 job seekers affected by the McDonald’s Canada data breach

A Canadian flag waves beside McDonalds fast food restaurant in Toronto, May 1, 2014. About 400,000 people came to Canada under the government’s temporary foreign worker program, which is designed to fill jobs for which there are no qualified Canadian candidates. The program has been hugely popular with employers, ballooning from 100,000 workers in 2002. But the backlash against it has also grown as the program, initially designed to help the booming resource industry, has expanded to lower-skilled jobs, especially at restaurant chains such as McDonald’s Corp and Tim Hortons Inc. To match Feature CANADA-EMPLOYMENT/TEMPORARY REUTERS/Mark Blinch (CANADA – Tags: BUSINESS EMPLOYMENT FOOD POLITICS)

The McDonald’s Canada career website was recently subject to a cyber-attack. Hackers stole records of 95,000 job seekers.

McDonald’s Canada confirmed that hackers have stolen the personal data of about 95,000 job seekers from its recruitment website.

The data were provided by candidates searching for a job at McDonald’s Canada since March 2014. The company has launched an investigation into the data breach that exposed job candidates’ names, addresses, emails, telephone numbers, employment histories and other personal data.

“The McDonald’s Canada (“McDonald’s”) career website (http://www.mcdonalds.ca/ca/en/careers.html or http://www.mcdonalds.ca/ca/fr/careers.html) was recently subject to a cyber-attack.” reads the data breach notification published by the company.

“As a result, the personal information of approximately 95,000 restaurant job applicants has been compromised. Applicants affected are those who applied online for a job at a McDonald’s Canada restaurant between March 2014 and March 2017. “

McDonald's Canada

McDonald’s Canada has shut down the recruitment website, fortunately the company doesn’t request sensitive data such as health information, social insurance numbers and financial information.

The company confirmed that it is not aware of any abuse of the stolen data.

“The careers webpage will remain shut down until the investigation is complete and appropriate measures are taken to ensure that this type of security breach does not happen again,” continues the breach notification.

[adrotate banner=”9″]

Pierluigi Paganini

(Security Affairs – McDonald’s Canada, data breach)