<story><title>Massive Breach in Panera Bread</title><url>https://pastebin.com/21H28TA1</url></story><parent_chain></parent_chain><comment><author>deft</author><text>A similar flaw exists in the Denny&amp;#x27;s Canada app. Reveals usernames, email, full name and phone number. The API is entirely unauthenticated and account hijacking is very easy. The app is used for reward points that grant you free meals.&lt;p&gt;I tried reaching out to them multiple times and was ignored. I tried contacting the firm that developed the app, and they ignored me. Maybe I should have made a pastebin dump :)</text></comment>
<story><title>Massive Breach in Panera Bread</title><url>https://pastebin.com/21H28TA1</url></story><parent_chain></parent_chain><comment><author>dsl</author><text>Verified the vulnerability, but it looks like they have taken down the API now.&lt;p&gt;Hopefully they will publicly acknowledge.</text></comment>