Security researchers discovered that the McHire AI-powered hiring platform, which utilizes the 'Olivia' chatbot, was accessible via default administrative credentials. An additional IDOR vulnerability in the platform's API allowed for the potential unauthorized retrieval of sensitive applicant data, including chat transcripts and PII. The vulnerabilities were disclosed and patched within 24 hours, with the vendor reporting that only five records were accessed by the researchers themselves.
Researchers Ian Carroll and Sam Curry reported that McDonald's AI-powered hiring tool, McHire (using Paradox.ai's "Olivia" chatbot), could purportedly be accessed via default admin credentials and an insecure direct object reference in an internal API. The flaws allegedly allowed viewing of applicants' personally identifiable information and chat histories. McDonald's and Paradox reportedly patched the issues within a day of disclosure; Paradox stated only five records were accessed.
Risk classification
- Primary risk domain: 2 Privacy & Security
- Primary risk subdomain: 2.2 AI system security vulnerabilities and attacks
The incident involved critical security vulnerabilities (default admin credentials and an IDOR API flaw) in the platform hosting the AI recruiter bot, which exposed applicant data.
Additional risk subdomains
- 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The security vulnerabilities directly exposed the sensitive personal data and chat histories of millions of job applicants.
Causal factors
- Entity: Human
- Intent: Unintentional
- Timing: Post-deployment
The incident was caused by human developers leaving default credentials and an IDOR vulnerability in the deployed system, leading to an unintentional exposure of data.
EU AI Act risk tier
High Risk: The system is an AI-powered hiring platform used in recruitment. Under the EU AI Act, 'Employment and worker management systems, such as AI used in recruitment' are classified as High Risk (Level 2).
AI system and alleged parties
- AI system: Olivia (Paradox.ai)
- AI purpose: Application Evaluation; Chatbot
- Behaviour type: Assistant
- Alleged developer: Paradox.ai, McDonald's
- Alleged deployer: Paradox.ai, McDonald's
- Alleged harmed parties: McDonald's applicants
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Negligible, indirect Negligible
- Civil rights: direct Negligible, indirect Negligible
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Minor, indirect Negligible
- Psychological: direct Negligible, indirect Negligible
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Privacy
Reported: Yes, the report explicitly describes a security lapse that exposed sensitive data of nearly 64 million job applicants.
Directly caused: Five candidates had their information, including chat logs and PII, viewed by the security researchers who discovered the vulnerability.
People affected
- Occurrences reported: 1
- People reportedly harmed: 5
- People reportedly exposed: 64000000
Potential causes
Management
- Prioritizing Speed Over Safety: Rushing to deploy automated recruiter bot without core security reviews.
- Inadequate Third-Party Risk Management: Failure to verify security posture of Paradox.ai platform.
Technology
- Default Admin Credentials: Legacy admin interface accepted default '123456' login details.
- Insecure API Endpoint (IDOR): Predictable parameters allowed access to sensitive applicant chat logs.
- Siloed AI Tooling Integration: AI hiring platform lacked integration into core security systems.
Data Inputs
- Unsecured Candidate Chat Logs: Exposed database held raw conversational text from recruitment bot.
- Sensitive Personality Test Data: AI-generated personality profiles were stored without proper access controls.
- Exposed Authentication Tokens: Candidate tokens in the data allowed impersonation of job applicants.
Human Factors
- Developer Oversight: Developers left active default credentials on a production dashboard.
- User Trust in Default Settings: Lack of awareness regarding legacy accounts and default passwords.
Process and Methods
- Inadequate Security Audits: Lack of pre-deployment penetration testing on the AI interface.
- Flawed API Authorization Design: Missing authorization checks on internal API requests.
Regulatory Environment
- Weak AI Procurement Standards: Absence of strict compliance mandates for third-party recruitment AI.
- Varying Franchise Security Standards: Lack of unified regulatory oversight for decentralized franchise systems.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide consistent, detailed accounts of the security vulnerabilities, the specific data exposed, and the rapid remediation process. Both the researchers' findings and the vendor's response are documented with clear figures.
Security researchers discovered default credentials and an IDOR vulnerability in McDonald's McHire platform, potentially exposing applicant data. The flaws were patched within 24 hours with only five records accessed by the researchers. The incident represents a standard commercial data security issue with negligible national security implications.
- Overall national security impact: Negligible
- Scope: Single nation
- Primary target: United States
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Long-term. The vulnerability was patched within 24 hours of disclosure, resolving any immediate threat.
- Autonomy: Human-controlled. The Olivia chatbot assists in screening candidates, but final hiring decisions remain with human managers.
- Novelty: Established threat. Default credential and IDOR vulnerabilities are highly common, well-established cybersecurity flaws.
Impact by dimension
- Physical security: Negligible. No physical systems, critical infrastructure, or human safety threats were involved in this incident.
- Information security: Negligible. No intelligence capabilities, classified models, or systematic information warfare campaigns were compromised.
- Sovereignty: Negligible. The incident affected a private commercial hiring platform and did not impact state authority or government functions.
- Economic security: Negligible. No strategic technology theft, critical supply chain disruption, or macroeconomic instability resulted from this commercial security vulnerability.
- Societal stability: Negligible. While potential privacy exposure was large, actual data access was limited to five records by researchers, causing no societal-scale instability.
.avif){kind=small}