Home/AI Incident Database/Default credentials on a hiring chatbot's admin portal expose 64 million applicant records
Default credentials on a hiring chatbot's admin portal expose 64 million applicant records
Security researchers logged into a test account on the recruiting assistant's administration portal with the username and password 123456 and found an API that returned chat transcripts and personal data for tens of millions of job applicants by incrementing an identifier.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.