The fast-food giant McDonald's potentially exposed 64 million job application records to security breaches because of its artificial intelligence-driven recruitment platform, according to Wired.
Weak login credentials and authentication vulnerabilities left aspiring employees susceptible to data breaches and identity theft, per the report, which said the data included "applicants' names, email addresses, and phone numbers."
What's happening?
As Digital Watch also reported, the McHire platform developed by Paradox.ai allegedly had inadequate security controls, exposing large totals of job applicant data.
The AI recruitment tool utilized a chatbot named Olivia, which applicants reported experiencing miscommunication issues and receiving poor prompt responses. McDonald's has been using AI to screen and assess job candidates while collecting their personal identifiable information.
Security researchers were able to hack into the McHire platform using weak credentials, such as a password of "123456." They also warned of broader phishing risks associated with payroll scams and additional data breaches from fake recruiters posing as McDonald's employees. Paradox said it resolved the matter within hours of being notified by the researcher in a statement on its website.
In a statement to The Cool Down, McDonald's said: "At no point was candidate information leaked online or made publicly available. Five candidates in total had information viewed because of this incident, and it was only viewed by the security researcher.
"... Importantly, at no point was candidate information leaked online or made publicly available."
Why are AI data breaches significant?
AI-related data breaches damage the infrastructure needed to support artificial intelligence in our modern world. AI systems can put vast amounts of data into the hands of malicious actors, resulting in financial losses and fraud.
Beyond the personal impacts, massive AI systems consume enormous amounts of energy and significantly contribute to planet-overheating pollution. Powerful AI tools require substantial amounts of electricity and water, posing challenges in areas where outages and shortages are already common because of intensifying weather patterns.
This is an increasingly significant problem as more major companies incorporate AI into their regular business operations.
TCD Picks » Upway Spotlight
💡Upway makes it easy to find discounts of up to 60% on premium e-bike brands
What's being done to limit AI breaches and energy use?
McDonald's and Paradox.ai have been investigating this data breach and assessing the damage caused by McHire. They plan to strengthen safety measures to ensure job applicants' and employees' personal information is secure.
These critical steps are essential to corporate responsibility and cutting through greenwashing campaigns that mislead consumers with false or exaggerated claims.
|
Do you worry about companies having too much of your personal data? Click your choice to see results and speak your mind. |
Absolutely 👍 AI is a powerful and valuable tool with immense potential for corporations as they navigate the future. However, companies must not only prevent security breaches but also address AI's energy consumption.
Fortunately, researchers have been developing technologies to reduce AI's energy consumption and increase its energy efficiency.
Meanwhile, governing authorities have been taking steps to monitor and mitigate the harmful impacts of AI, enabling people to use it responsibly and sustainably.
For AI users, it's a wise idea to educate yourself about corporate greenwashing and learn more about how AI systems work, including their risks and benefits. You can also advocate for corporate responsibility at your own workplace and be mindful of how AI is used at work to impact people and the broader ecosystem.
Join our free newsletter for good news and useful tips, and don't miss this cool list of easy ways to help yourself while helping the planet.
Cool Picks
