Overview
- Two third-party partners detected attempts to access customer information in McDonald’s France’s loyalty program and moved quickly to secure the environment.
- Fraudsters used stolen loyalty-point balances to get discounts on orders, a tech outlet reported that dozens of accounts appear to have been affected.
- McDonald’s France says no sensitive or financial data were accessed and that corrective actions have contained the incident.
- As a precaution the company has launched a procedure to reset customer account credentials and has set up help pages in its app and on its website.
- The firm has not disclosed how many accounts were hit or when the access occurred, raising questions about transparency and the security role of external partners.