Slashdot Mirror


McDonald's Hacked and Customer Data Stolen

An anonymous reader writes "McDonald's servers were recently compromised and hackers were able to get access to customers' e-mail addresses, names, addresses, phone numbers, birth dates, genders, as well as certain information about their promotional preferences and Web information interests. The sites affected were: McDonalds.com, 365Black.com, McDonalds.ca, mcdonaldsmom.com, mcdlive.com, monopoly.com, playatmcd.com, and meencanta.com. The restaurant chain is warning customers to be cautious of anyone claiming to be from McDonald's contacting them by phone or e-mail, and asking for personal or financial information. McDonald's has also set up a FAQ page for affected customers with 13 questions and their corresponding answers." Update by KD : Weld Pond tweets: "Silverpop email marketer owned. Was email subcontractor for McDonalds and DevientART (13M users) and 105 other orgs."

178 comments

  1. And all the e-mails said... by turbclnt · · Score: 5, Funny

    I can has cheezburger?

    1. Re:And all the e-mails said... by Jawnn · · Score: 1

      I can has cheezburger?

      You can has all cheezburgers.

    2. Re:And all the e-mails said... by IsaacD · · Score: 1

      Oh shit! I'm screwed if my wife finds out about that McRib a couple of weeks ago!

    3. Re:And all the e-mails said... by Theoboley · · Score: 1

      The smells coming from the john should've been evidence enough.

      --
      Stupidity only gets you so far, then you've gotta try
  2. Wait... by Locke2005 · · Score: 4, Insightful

    Why would any sane person possibly give McDonald's all their personal information in the first place?

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
    1. Re:Wait... by wowbagger · · Score: 5, Insightful

      "Why would any sane person possibly give McDonald's any of their personal information in the first place?"

      Fixed that for you.

      It's a damn burger, not a car - it's not like I have to finance the damn thing! I hand you money, you hand me something that, under bad light, might pass for food.

      The closest they might get is if I charge the burger, and even then, all they get is a confirmation code from my credit card.

    2. Re:Wait... by drunkennewfiemidget · · Score: 1

      This is what I came here to say. I mean, I realise they say 'billions served' which means there's a whole lot of fucking morons in that collection, but at what point in your lifetime were you even asked to give McDonald's any of your information? Every single interaction with me and McDonald's in my lifetime has been:

      1) Order
      2) Pay
      3) Receive 'food'
      4) Consume 'food'
      5) Regret eating 'food'
      6) Spend more time on the throne than I would have liked to.

      Fortunately, the last few steps have prevented me from going back there too often. Which was tougher when our son was younger and less discerning.

    3. Re:Wait... by jimbolauski · · Score: 3, Insightful

      Why would any sane person possibly give McDonald's all their personal information in the first place?

      The same type of people who frequent McDonalds regularly, would think it's a good idea to get the McRib is coming updates. Also if you win a prize from their monopoly game you might have to give them your info?

      --
      Knowledge = Power
      P= W/t
      t=Money
      Money = Work/Knowledge so the less you know the more you make
    4. Re:Wait... by micksam7 · · Score: 2

      This is primarily information used by McDonald's giveaways, such as the Monopoly promotion when entered online.

      Only names, numbers, emails, and addresses were taken.

    5. Re:Wait... by 6031769 · · Score: 5, Funny

      Also if you win a prize from their monopoly game ...

      I think they prefer the term "franchise".

      --
      Burns: We're building a casino!
      McAllister: Arrr. Give me 5 minutes.
    6. Re:Wait... by turkeydance · · Score: 0

      why would ANYone give ANYone ANY personal information online? ANYwhere at ANYtime. i'm confused.

    7. Re:Wait... by DarkOx · · Score: 3, Funny

      I'd gladly pay you Tuesday for a hamburger today.

      --
      Repeal the 17th Amendment TODAY! Also Please Read http://www.gnu.org/philosophy/right-to-read.html
    8. Re:Wait... by Opportunist · · Score: 2

      Try something:

      Sit down in front of a McD and offer anyone who hands you their name, address, phone number and email a free hamburger.

      Bet you go home with more than 100 addresses after, say, 3 hours.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    9. Re:Wait... by pspahn · · Score: 1

      Yes, billions served, but they leave out how many people were actually affected. Sure, it makes sense to not disclose that number, but I'd bet it is embarrassingly small.

      --
      Someone flopped a steamer in the gene pool.
    10. Re:Wait... by Applekid · · Score: 3, Interesting

      1) Order
      2) Pay
      3) Receive 'food'
      4) Consume 'food'
      5) Regret eating 'food'
      6) Spend more time on the throne than I would have liked to.

      It's step #2 that's the issue. People can be coerced into providing all sorts of information if you promise to send them coupons. I personally think that saving 20 cents on a fast food burger is worth giving out your email, name, address, and phone number, but, hey, I'm currently employed.

      --
      More Twoson than Cupertino
    11. Re:Wait... by Dthief · · Score: 1

      I wouldn't.......if it was from McD's

      --
      www.RacquetUp.org - Helping Detroit Youth
    12. Re:Wait... by Dthief · · Score: 2

      I bet 99 of those are "fake" [i.e. not where the person lives] addresses, and the 1 address that isn't fake has nothing to steal

      --
      www.RacquetUp.org - Helping Detroit Youth
    13. Re:Wait... by MightyMartian · · Score: 1

      why would ANYone give ANYone ANY personal information online? ANYwhere at ANYtime. i'm confused.

      Yes you are.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    14. Re:Wait... by MobileTatsu-NJG · · Score: 3, Funny

      Your grasp of that joke was Wimpy.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    15. Re:Wait... by crashandburn66 · · Score: 3, Insightful

      McDonald's takes job applications online via their web site. Last time I checked, job applications ask for your personal information.

    16. Re:Wait... by geekoid · · Score: 1

      Contests.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    17. Re:Wait... by PlusFiveTroll · · Score: 0

      You underestimate how stupid the vast majority of people are.

      Politicians have figured out the most of us are stupid cows waiting for slaughter. That's why we keep getting screwed every election.

    18. Re:Wait... by gustgr · · Score: 2

      It also takes on-line take-out orders in several places of the world, which also requires personal information -- at least a name and an address, but I suppose they ask for more info than that on the order form.

    19. Re:Wait... by magarity · · Score: 1

      It also takes on-line take-out orders in several places of the world, which also requires personal information -- at least a name and an address, but I suppose they ask for more info than that on the order form.

      There are places where McDonald's provides *delivery* which definitely requires a name and an address.

    20. Re:Wait... by __aatirs3925 · · Score: 1

      If it will make you feel better, I got the joke and I giggled inside. Fond, fond childhood memories. Too bad the internet has destroyed my image of Oliveoil with strange images fully utilizing her long tentacle-like arms. *ahem* Getting back on topic, I'd be willing to give them my (for registration use only) e-mail for a free burger or other coupons. After all, I have about 2000 unopened messages in that account but McD. prefers to get ALL of your info. Real shame... Oh well, I haven't eaten there in years since they reduce their burger (err meat?) size and increase the price and it's not even that good IMO. Burger King is much better, heck, even Wendy's is better. But if you want good burgers, head over to In-and-Out or Jack in a box. Mmm..... Now there's fast food money well spent.

    21. Re:Wait... by __aatirs3925 · · Score: 0

      You sir, have made this thread worthwhile.

    22. Re:Wait... by istartedi · · Score: 1

      I suspect it was some promo, like those receipts that say "answer our survey and get a chance for a free burger". I've always said you'd win a lifetime supply of spam. This just proves it.

      --
      For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
    23. Re:Wait... by Cwix · · Score: 1

      *golf clap*

      --
      You are entitled to your own opinions, not your own facts.
    24. Re:Wait... by MysteriousPreacher · · Score: 1

      In and Out is a very unfortunate name for any place serving food. You're right about Wendy's. Shame they pulled out of Europe.

      --
      -- Using the preview button since 2005
    25. Re:Wait... by Anonymous Coward · · Score: 0

      So if I give you a phone book, you'll give me 30,000 hamburgers? Sounds like a deal!

    26. Re:Wait... by guyminuslife · · Score: 2

      Not if you stood outside a McDonald's and bought them the hamburger personally. Most people would feel like they owed you, even if it was only a hamburger, and feel bad if they were dishonest about it. Like, all you wanted to do was buy them a hamburger, it's the least they can do!

      Put it on a sign-up sheet, you know? Makes it look less seedy.

      Of course I'm one to talk...I would lie. (And I have, in exactly that situation, except with better sandwiches.) Maybe not about my name. But everything else, yeah.

      --
      I don't believe in time. It's a grand conspiracy designed to sell watches.
    27. Re:Wait... by PopeRatzo · · Score: 1

      Why would any sane person possibly give McDonald's all their personal information in the first place?

      Why would any sane person possibly eat in McDonald's in the first place?

      And of course, even if you were so moved to have a McRib value meal, you are correct: Why would you even consider giving them your email address, name, etc?

      --
      You are welcome on my lawn.
    28. Re:Wait... by Jaysyn · · Score: 4, Informative

      A bit pricey, but Five Guys has the best fast-food burger I've ever eaten.

      --
      There is a war going on for your mind.
    29. Re:Wait... by Anonymous Coward · · Score: 0

      For a free pack of McNuggets some people would give them their first born.

    30. Re:Wait... by Opportunist · · Score: 1

      If those include valid mail addresses that are actually read, I'll even call the ambulance for you when you attempt to eat those greaseballs!

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    31. Re:Wait... by PRMan · · Score: 1

      Say, "You could win a car" at a mall and you'll get thousands per hour.

      --
      Peter predicted that you would "deliberately forget" creation 2000 years ago...
    32. Re:Wait... by ArcherB · · Score: 1

      why would ANYone give ANYone
      ANY personal information online?
      ANYwhere at ANYtime.
      i'm confused.

      says the NON-anonymous coward.

      --
      There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
    33. Re:Wait... by thePowerOfGrayskull · · Score: 1

      It's step #2 that's the issue. People can be coerced into providing all sorts of information if you promise to send them coupons.

      I think that word does not mean what you think it means.

    34. Re:Wait... by Anonymous Coward · · Score: 0

      strange ordering of fast-food restaurants ending with "even Wendy's is better"; perplexing given that Wendy's > BK > McDs and of those 3 only Wendy's comes close to a burger that you'd get at a halfway crappy pub/restaurant

    35. Re:Wait... by Conspire · · Score: 1

      Why would any sane person possibly give McDonald's all their personal information in the first place?

      I'm going to take the question up to the next level and ask "Why would any sane person eat at McDonalds"

      --
      Real men don't need signitures!!!
    36. Re:Wait... by Anonymous Coward · · Score: 0

      All your Big Macs are belong to us.

    37. Re:Wait... by devbox · · Score: 0

      What are you talking about? Wendy's is all over Germany at least. Personally I don't like their burgers, and from McDonald's I only like cheeseburgers - otherwise I rather eat in a real restaurant.

    38. Re:Wait... by BrokenHalo · · Score: 1

      I heard McDonalds burgers weren't very nice, but I didn't realise they gave you the clap...

    39. Re:Wait... by vegiVamp · · Score: 1

      If you're unemployed, however, is there no cheaper way of feeding yourself than fastfood. Like, say, shopping carefully and cooking yourself ?

      --
      What a depressingly stupid machine.
    40. Re:Wait... by vegiVamp · · Score: 1

      I think you'd be very surprised. Also, I suspect it'd be worth a try to ask for their password, too, in exchange for two burgers maybe.

      Too lazy to google, but I seem to recall something in the last months about a similar thing, where people were offered a bar of chocolate or something in exchange for their password.

      Don't think they verified the accuracy of the passwords, though; but if you said that you can offer them a free burger in exchange for their mcdonals.com user and password - to verify that they're a member, of course ! - you might get a surprising number of working ones.

      --
      What a depressingly stupid machine.
    41. Re:Wait... by vegiVamp · · Score: 1

      Why would online take-out require an address ? Name, ok, easy identification of the order - assume people won't remember your uid - but if you pre-pay the order, they have no need whatsoever for your address or any other details.

      --
      What a depressingly stupid machine.
    42. Re:Wait... by SeaFox · · Score: 1

      It's a damn burger, not a car...

      The information might have been linked to the Monopoly game since this round was done online. No paper game boards customers affixed pieces to. And in the past prizes in the Monopoly games have actually included cars.

    43. Re:Wait... by petermgreen · · Score: 1

      While I don't go to mcdonalds much anymore due to trying to lose weight I found that they offered food that I liked and equally importantly they did so consistently. If i'm away from home and hungry I can go into a mcdonalds buy a box of mcnuggets and a milkshake (I don't like chips) and be pretty sure it would be as nice as the ones bought in the mcdonalds locally. It's not fancy but the batter doesn't have any weird tastes and the chicken inside is fine too.

      I'm sure the same applies to other chain outlets but mcdonalds is one of the most common and one where I know I can get food I like.

      Independents can be good but they can also be terribly bad and when I'm hungry, in an unknown place and just want something nice quickly then consistency is very attractive.

      Why does everyone pick on mcdonalds? I know fried food isn't particually healthy but why pick on mcdonalds in particular? is there something worse about their food than comparable food from a local outlet?

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    44. Re:Wait... by Aceticon · · Score: 2

      FYI - it's a quote from Wimpy, a burger-addicted character from the Popeye the Sailorman cartoon

      (damn, I'm showing my years here)

    45. Re:Wait... by Anonymous Coward · · Score: 0

      If they're still in Germany then they're doing a good job of having no online presence. They pulled out of the UK some time back - and from what I can see the same happened in other European countries.

      Did the Wendy's you saw have a giant yellow upside-down W as their logo? If so then I see the problem here.

    46. Re:Wait... by ColdGrits · · Score: 1

      Too lazy to google, but I seem to recall something in the last months about a similar thing, where people were offered a bar of chocolate or something in exchange for their password.

      First, it was over 2 years ago.
      Second it was apparently 20% of people gave their passwords in exchange for chocolate.
      http://www.darknet.org.uk/2008/04/chocolate-owns-your-passwords/

      However, the key thing is - the survey had absolutely zero way of confirming whether the passwords were genuine or not.

      You know what? Some random in the street offers me a bar of chocolate in exchange for my password, I'll gladly trade; I end up with a free bar of chocolate, they end up with a garbage string of characters which isn't my password to anything at all. Seems I would be included in that 20%, but my security would have remained uncompromised and I'd be better off to the tune of 1 bar of chocolate.

      which all just goes to show that the survey was crap, the results equally so.

      --
      People should not be afraid of their governments - Governments should be afraid of their people.
    47. Re:Wait... by vegiVamp · · Score: 1

      > it was apparently 20%

      I don't know about you, but I find that worrisome.

      > However, the key thing is [...]

      Yes, that's what I hinted at; however, while there are certainly those, I'm afraid I have quite a bit less faith in the security-related intelligence of Joe Average User. I can't tell you how many times I found passwords on post-its, in support tickets without even asking, et cetera.

      No, of those 20%, I honestly wouldn't be surprised if there's three-quarters genuine, especially with the "to verfiy you're registered" ruse I suggested.

      --
      What a depressingly stupid machine.
    48. Re:Wait... by devbox · · Score: 0

      Well at least I saw one at the Berlin airport when I was flying via it.

    49. Re:Wait... by drinkypoo · · Score: 1

      If you cook yourself, at least you won't be hungry any more...

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    50. Re:Wait... by Krneki · · Score: 1

      Why would any sane person possibly use McDonald's in the first place?

      Fixed that for you.

      --
      Love many, trust a few, do harm to none.
    51. Re:Wait... by Opportunist · · Score: 1

      That's illegal here if there's not really a car to win, so... I'd rather not.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    52. Re:Wait... by ColdGrits · · Score: 1

      > it was apparently 20%

      I don't know about you, but I find that worrisome.

      Not worriesome, because there is zero data to confirm whether those passwords were anything like valid or not, thus no conclusions can be drawn whatsoever other than 20% of people figured out how to get a free bar of chocolate.
      Nothing more, nothing less.

      --
      People should not be afraid of their governments - Governments should be afraid of their people.
    53. Re:Wait... by Conspire · · Score: 1

      Suggest you watch Super Size Me http://www.imdb.com/title/tt0390521/ People pick on McDonalds because they are perhaps the number one brand in the industry globally, they use marketing tactics to entice children to the brand and the junk food they serve, and they have been a leader in the "race to the bottom" in the fast food industry. I think there are probably other reasons but those are a few!

      --
      Real men don't need signitures!!!
    54. Re:Wait... by minstrelmike · · Score: 1

      Why would any sane person possibly give McDonald's all their personal information in the first place?

      For a free burger. All I gotta do is fill out this form and I get a burger on my birthday. Yippeeeeeeeeee.

    55. Re:Wait... by Relayman · · Score: 1

      Many sites request the birth date for age verification. Unless they really have a good reason to need my real birth date, I give them a fake one (Jan. 1 of a year in the 50s, typically). They can access my bad data any time they want.

      --
      If I used a sig over again, would anyone notice?
    56. Re:Wait... by mcgrew · · Score: 1

      If you're unemployed, however, is there no cheaper way of feeding yourself than fast food?

      "Fast food" is a typo. It's not fast; I can sit down in a real restaraunt like Top Cat's, order, and have meal in front of me faster than I can wait in line at McDonald's and get my "food".

      It's fats food!

    57. Re:Wait... by Jesus_666 · · Score: 1

      Especially as McDonald's isn't particularly cheap, even within the domain of fastfood "restaurants". Of course that doesn't stop people from eating there...

      --
      USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
    58. Re:Wait... by Locke2005 · · Score: 1

      The In-n-Out Burger bumper sticker was apparently intentionally designed to encourage people to cut off the B and R I

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    59. Re:Wait... by Anonymous Coward · · Score: 0

      Cook Out... FTW!

    60. Re:Wait... by Abcd1234 · · Score: 1

      Why would any sane person possibly give McDonald's all their personal information in the first place?

      One word: contests.

      A lot of companies, McDonald's included, run web-based contests (their Monopoly promotion is the first one that comes to mind). And naturally, if you enter a contest, you provide PII...

    61. Re:Wait... by Kiaser+Zohsay · · Score: 1

      Here, here! Regular burger tray, cheddar style with fries and rings!

      Cook out beats Five Guys, and they have awesome shakes. Unfortunately, they are only found in the south-eastern US region, and they have virtually no web presence at all. That's OK when your food is this good.

      --
      I am not your blowing wind, I am the lightning.
    62. Re:Wait... by Jaysyn · · Score: 1

      Never heard of them. After a bit of research I've discovered that they are only in North Carolina, so fat lotta good that does anyone.

      http://eatcookout.com/

      --
      There is a war going on for your mind.
  3. Re: by mugetsu37 · · Score: 1

    Oh no, all those late night drive-thrus, known to the world!

  4. why ?! by Anonymous Coward · · Score: 0

    why do people even give this kind of information to a burger flipper ?
    Is it the same gene that makes people want to go eat there that also makes them do things like this ?

    1. Re:why ?! by Anonymous Coward · · Score: 0

      Or it could be ex-employees signing up their boss to sites like these. It's like giving them the final "fuck you too" on the way out.

    2. Re:why ?! by houghi · · Score: 1

      Worse, it is the same people that vote.

      --
      Don't fight for your country, if your country does not fight for you.
  5. Suspect identified by fridaynightsmoke · · Score: 5, Funny

    Police say they're looking for a short chubby-faced man with ginger hair, wearing a black-and-white striped outfit, a black eye mask, red gloves, a black cape with yellow lining and a red tie with hamburger detail. The man is linked to previous thefts of foodstuffs (primarily hamburgers) from McDonalds.

    --
    This is a substitute for a clever sig that fits within the maximum number of characters.
    1. Re:Suspect identified by countSudoku() · · Score: 1

      Is that you, Hamburgler? Trying to frame Ronald again? For shame. No burgers for you, sir!

      If this had been a loss of important data, heads would roll. In this case, the status of my McDonald's Monopoly Game tokens may have leaked to the public eye and Mark Zukerburg strikes again. Why do we even need passwords anymore? All data is now public... 8^)

      --
      This is the NSA, we're gonna geet U h@x0r5! Also, what is a h@x0r5?
    2. Re:Suspect identified by pixelpusher220 · · Score: 1

      You sir win a prize!

      but first we need your name, number, address....

      --
      People in cars cause accidents....accidents in cars cause people :-D
    3. Re:Suspect identified by bughunter · · Score: 4, Funny

      Overheard at the scene:

      "Robble, robble!"

      --
      I can see the fnords!
    4. Re:Suspect identified by Anonymous Coward · · Score: 0

      Sounds like the Big Mac attack was a smashing success

  6. My McRib Addiction by BigSes · · Score: 1

    Known to the world...oh the shame! /kill self

  7. Hamburgler strikes again! by AbRASiON · · Score: 1

    Robble Robble Robble!

  8. !admin by Anonymous Coward · · Score: 4, Funny

    They were probably using HP MSA2000 Arrays..

    1. Re:!admin by crow_t_robot · · Score: 1

      ...protected by OpenBSD-based firewalls.

  9. I can has by santax · · Score: 1

    Big Database?

    1. Re:I can has by Anonymous Coward · · Score: 0

      Big Database?

      Supersize that database.

    2. Re:I can has by Opportunist · · Score: 1

      Want some fries with that?

      Or in this case rather, want some spam with it?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    3. Re:I can has by Anonymous Coward · · Score: 0

      no, its "dat database!"

  10. This reminds me.... by f3rret · · Score: 3, Interesting

    A while back while WiFi was still new and shiny; and before people had figured the whole "put a password on it"-thing, a friend and I were out wardriving, we came across an open network that turned out to belong to a local Micky D's. Connected to the network and saw a single computer running on it, a little poking at it revealed it to be running some flavor of windows XP and some more poking revealed it to have a blank admin password.
    So when we connected to the standard "C" (or whatever the standard network share is called, I forget) network share and found a huge excel document in the root of said drive, downloaded it and found it to contain all the information - addresses, phone numbers, SSNs and e-mail addresses - of the employees of said Micky D's.

    Cool story, huh?

    --
    Admit nothing. Deny Everything. Make Counter-accusations.
    1. Re:This reminds me.... by Anonymous Coward · · Score: 0

      It's not 'cool.' Sadly it's not even surprising.

    2. Re:This reminds me.... by MightyMartian · · Score: 1

      It would be cool if you ended the story with "And then my friend and I were struck by out an out of control semi doing about 90mph, and now I'm typing from my wheelchair using a straw to the rhythm of my ventilator."

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    3. Re:This reminds me.... by Anonymous Coward · · Score: 0

      Congrats, you get to answer 'yes' when ever you fill out a form asking if you've illegally accessed a computer you aren't supposed to access. That and wire fraud. enjoy.

    4. Re:This reminds me.... by f3rret · · Score: 1, Funny

      Wire fraud? But we did it via a wireLESS network :(

      --
      Admit nothing. Deny Everything. Make Counter-accusations.
    5. Re:This reminds me.... by Anonymous Coward · · Score: 0

      wireless with no password and a computer with no admin password, that's about as invited as it gets. as long as they didn't use the information they got for anything then they would have a good chance of getting off the charges with no conviction.

      if there was a WEP password or any sort of "your not allowed here" or "Authorised users only" sort of notification then your right.

      also, wire fraud? what fraud was committed?

    6. Re:This reminds me.... by X0563511 · · Score: 1

      Bullshit. You can't (and never could) access those hidden shares with a blank password.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    7. Re:This reminds me.... by koro666 · · Score: 2

      I believe you could before XP Service Pack 2 (which kinda reinforced security).

    8. Re:This reminds me.... by f3rret · · Score: 1

      Well the share wasn't hidden, it showed up on the "browse network" screen and there was no password, just the username "Administrator"

      --
      Admit nothing. Deny Everything. Make Counter-accusations.
    9. Re:This reminds me.... by f3rret · · Score: 0

      We didn't really do anything with it, we just saw a file with an interesting name, opened it and looked at it and went "huh, how about that, what a stupid way to secure sensitive data" and then went on our merry way.

      --
      Admit nothing. Deny Everything. Make Counter-accusations.
    10. Re:This reminds me.... by Anonymous Coward · · Score: 0

      Yeah, those semantic arguments count in the real world. Keep parroting them.

    11. Re:This reminds me.... by Anonymous Coward · · Score: 0

      So when we connected to the standard "C" (or whatever the standard network share is called, I forget) network share and found a huge excel document in the root of said drive, downloaded it and found it to contain all the information - addresses, phone numbers, SSNs and e-mail addresses - of the employees of said Micky D's.

      Cool story, huh?

      Then you and you friend high fived each other, because you knew, you had the phone numbers of all the hot drive thru girls and front counter hotties, and would put it to good use. But alas, what would you say? How could you respond to them after they ask you where you got their number, and even worse, what would their BOYFRIENDS think about this?

      >RM STAFF_LIST.XLS

      >QUIT

    12. Re:This reminds me.... by sjames · · Score: 1

      Everything's legal as long as you don't get caught!

      It's the modern corporate mantra!

    13. Re:This reminds me.... by TheThiefMaster · · Score: 1

      The standard share was called C$, was only accessible with a password and was hidden. If it showed in browse network, it wasn't the standard share.

    14. Re:This reminds me.... by Anonymous Coward · · Score: 0

      Cool story, huh?

      Yep, and that's all it is. You cannot access shares with an empty password.

    15. Re:This reminds me.... by f3rret · · Score: 1

      Well for all I know there was no password on the damn thing, all I know is we didn't need to enter one and the username "administrator" got us in.

      Either way, believe it or not; I don't really care.
      It was just a stupid tale of some IT stupidity.

      --
      Admit nothing. Deny Everything. Make Counter-accusations.
    16. Re:This reminds me.... by Anonymous Coward · · Score: 0

      If I'm not mistaken the C$ and other similar shares are only available if the windows xp professional box is joined to an active directory/samba domain. And users with empty passwords are usually not usable over the network. Maybe all those security measures came in through service packs, though.

  11. Huh? by oldhack · · Score: 1

    Who register their email, etc. with Mickey D?

    --
    Fuck systemd. Fuck Redhat. Fuck Soylent, too. Wait, scratch the last one.
    1. Re:Huh? by 0100010001010011 · · Score: 1

      People that think they'll get coupons, 5% off, free shit.
      The same reason people give away their info to business.

    2. Re:Huh? by orphiuchus · · Score: 1

      Hey, that 5% really adds up over a month. *struggles to roll onto his side, runs out of breath, gives up*

    3. Re:Huh? by Quirkz · · Score: 1

      Anybody who wants a second chance at the Monopoly game. Most people will give away more than that for a shot at a million bucks.

  12. McDonalds doesn't cater to Vegetarians by ackthpt · · Score: 1

    Now if they hack Burger King or the Pho King then I'm hosed.

    --

    A feeling of having made the same mistake before: Deja Foobar
  13. Big Deal? by SilverHatHacker · · Score: 3, Interesting

    Sure, in principle its a bad thing, but I'd be willing to bet that 95% of those people had that exact same information on their Facebook, effectively available to the world anyway.

    --
    Funny may not give karma, but +5 Informative never made anyone snort coffee out their nose.
    1. Re:Big Deal? by Beerdood · · Score: 1

      Yea, what I was thinking exactly. This could be one of the most useless & non-damaging data breaches I've ever heard of. Some phone numbers, addresses and names.. What's exactly is a hacker going to do with this information?

      --
      Global warming and other natural disasters are a direct effect of the shrinking number of pirates - Gospel of the FSM
    2. Re:Big Deal? by Smallpond · · Score: 3, Funny

      Yea, what I was thinking exactly. This could be one of the most useless & non-damaging data breaches I've ever heard of. Some phone numbers, addresses and names.. What's exactly is a hacker going to do with this information?

      Sell it to Jenny Craig?

    3. Re:Big Deal? by Anonymous Coward · · Score: 0

      Yea, what I was thinking exactly. This could be one of the most useless & non-damaging data breaches I've ever heard of. Some phone numbers, addresses and names.. What's exactly is a hacker going to do with this information?

      Sell it to Jenny Craig?

      It's big news because it's McDonalds...

      Jenny Craig is expectantly waiting to make marketing calls though.

  14. The Draft by drumcat · · Score: 1, Interesting

    Remember, 40 years ago it was a scandal that the free happy meal postcard you filled out was how you were tracked for the draft. My dad taught me this lesson early on, and it's nothing but magnified. BTW, Thank You EFF for winning today!

    1. Re:The Draft by geekoid · · Score: 4, Informative

      The Happy meal is only 30 years old. 1979. The draft ended in 1973.

      So either you are trying to be funny, or your dad is an idiot.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:The Draft by gmhowell · · Score: 1

      Happy meals 40 years ago?

      You got trolled by your dad. Awesome.

      --
      Jesus was all right but his disciples were thick and ordinary. -John Lennon
    3. Re:The Draft by Anonymous Coward · · Score: 0

      Why can't it be both? It's like I was telling a friend who talked about seeing a man or woman walking downtown with a tail sticking out of their clothes.

      "Here in Portland, that isn't an either/or statement." --Not a joke.

    4. Re:The Draft by Anonymous Coward · · Score: 2, Informative

      This is the story you're all looking for.

    5. Re:The Draft by geekoid · · Score: 1

      so not 40; which was my point. Yeah, so I threw down a quick number.

      It would be like me bitching about your punctuation and grammar. Besides the point.

      So in short, fuck you.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    6. Re:The Draft by Anonymous Coward · · Score: 0

      Or more likely the public consensus was wrong at the time, just like people believed scientists were predicting a new ice ages in the 70s. Which they never did, not that the mass media got it would tell you, and continued to propagate their shit because they didn't understand the different between cyclical events and year of discovery.

      How about you stop being a moron and grow up? You'll reach puberty at some point, so start to think, fsckwit.

    7. Re:The Draft by Anonymous Coward · · Score: 0

      Yet another Slashtard who can't see the forest for the trees.

    8. Re:The Draft by Anonymous Coward · · Score: 0

      You dipshit fucking liar, stop spreading this nonsense. Now go fuck yourself. Tool.

    9. Re:The Draft by BBTaeKwonDo · · Score: 1

      1984, not 40 years ago, and it was Farrell's, not McDonalds http://www.snopes.com/military/icecream.asp

    10. Re:The Draft by Anonymous Coward · · Score: 0

      If information traveled that freely in 1984 (ancient times in technology terms), I can't even imagine what is happening today.

      (Too old for draft now anyway :| )

    11. Re:The Draft by CodeBuster · · Score: 1

      The draft ended in 1973.

      Although technically it didn't really end, they just haven't activated it since 1973. In fact, every male reaching 18 years of age in the United States is still required to register for the Selective Service System under penalty of fines, imprisonment and, if the failure to register continues past age 26, being unable to apply for a federal job or receive benefits. Of course, the government stopped enforcing this law by the mid 1980s because is basically requires a public admission of one's own guilt to actually effect a prosecution. In any event, it is highly unlikely that the draft will be used again in the near future. However, it does remain a theoretical possibility, given the right set of circumstances. Of course, many of us here on Slashdot are either too old or too fat or both to provide any meaningful form of military service, so it's probably a dead letter in any case.

    12. Re:The Draft by An+anonymous+Frank · · Score: 1

      What if his dad was trying to be funny?

    13. Re:The Draft by BluBrick · · Score: 1

      Did I just catch you arguing with someone who knows the inauguration year of the Happy Meal?

      --
      Ahh - My eye!
      The doctor said I'm not supposed to get Slashdot in it!
    14. Re:The Draft by sjames · · Score: 1

      The actual draft ended, but registration with the Selective Service is still mandatory.

      Selective service is what we now call the Draft Board now that the draft is unpopular.

    15. Re:The Draft by Anonymous Coward · · Score: 0

      There was a story a while back where a woman started receiving mail from the selective service for her parrot too.

      It turned out to be one of those things where she used her parrot's name with her last name and address when signing up for something so she didn't violate the rules of the contest and enter twice.

    16. Re:The Draft by Anonymous Coward · · Score: 0

      Go slit your fucking wrists fucktard.

      -Osgeld

  15. Dangit by Anonymous Coward · · Score: 0

    Now somebody will know my McDonalds password.

  16. Explaining proverbs 101 by Opportunist · · Score: 1

    Today: "Adding insult to injury".

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  17. and the most secret information is that ... by Anonymous Coward · · Score: 0

    those dudes like to go to McDonald!

  18. The question when you sign up for something... by Anonymous Coward · · Score: 0

    "Would you like to super-size your credit report?"

  19. Me And Spam Are Like Green Eggs And Ham by jareth780 · · Score: 1

    Those emails are already compromised by spammers, since I use them to communicate with family members, and they all distribute my address in those idiotic email forwards. They also get their laptops pwned once a month for good measure.

  20. The BIG question ... by neonprimetime · · Score: 1

    ... why would you give your personal information to McDonalds?

  21. McDonalds, serving millions by Anonymous Coward · · Score: 0

    McDonalds, serving millions of future Cancer Patients. Today.

  22. For the 100th time... by Anonymous Coward · · Score: 0

    ...would someone PLEASE post the OS that is running on all of these hacked servers? Sheesh.

  23. Re:McDonald's Sucks by imsabbel · · Score: 1

    I like McDonalds.
    I have to admit this are european McDonalds (the ones in the US I have been at looked more like a miniature Ghetto), but once a month or so it does not hurt.

    On the other hand, I am 1.85m and 90Kg, so it seems you not liking McDonalds doesnt work out for you, fatty.

    --
    HI O WISE PRINCE. WHT TOOK U SO DAM LONG?
  24. Re:McDonald's Sucks by geekoid · · Score: 1

    Why do you assume they are fat? why do you assume they are stupid? just becasue you can't control your calories, doesn't mean nobody can.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  25. But they need your personal information by Anonymous Coward · · Score: 0

    To track the success of your weight loss plan...

  26. I just hope ... by mawe · · Score: 1

    ... that my diet doesn't find any of my accounts in that data.

    --
    I'm afraid Mary is dead.
  27. Ronald McDonald needs help from Nigeria by ruthless+reader · · Score: 1

    Hello, My name name is Ronald McDonald from McDonald's. My Uncle who used to reside in Nigeria died recently and left me an inheritance of $5 million. If you are interested in earning 10% of this amount...

  28. Wtf is Mcdlive.com? by levinsontodd · · Score: 1

    Who goes to the mcdonalds web site? Do you need to check out the menu?

  29. Re:McDonald's Sucks by Hatta · · Score: 1

    There food is horrible

    Did you misspell "their" or just drop a comma? Either way it makes sense!

    it tastes like a charred hamster

    Where do you get charred hamster? I can't even get cuy around here.

    --
    Give me Classic Slashdot or give me death!
  30. Re:McDonald's Sucks by Stregano · · Score: 1

    I guess it is -1 time:
    1st off, how many people do you know that go to McDonald's on a regular basis? How many of those people go so much to where they are willing to give McDonald's their information for coupons? Go ahead, tell me if those ones are overweight.

    Just a single Hamburger (not cheeseburger, but hamburger) is 250 calories. Can you tell me a single person that will count calories at McDonald's? Ok, there may be a couple that do that.

    Next, as for me controlling my own calories, I am doing a great job. See, now you are assuming that since I am overweight, that I am not controlling my calories. About 2 years ago, I weighed in at about 315lbs. I went from 315-250 and am still going strong. I control my calories very well. To assume that I do not control my calories because I am overweight and think that Mc Greasy Fatty Fat Fat sucks.

    Next off, do you know a single person that is not dumb that will blindly give out their personal information for small promotional things? "Here sir, take all of my information and I might get a free cheeseburger or maybe $1 off the MSG Supreme". Really. Really?

    The fat assumption was done because I do not know a single frequent McDonald's goer that is skinny. Do you know a few? You are seriously the random exception. I used to live in Omaha, which (it still might be, I am unsure) at one point very recently, had more restaurants per capita than any other city in America. Google it if you don't believe me. If anybody knows fast food goers, it would be a person that spend 27 years of their life at a place that per capita had more restaurants than any other city in the country. Frequent McDonalds goers that go so much to where they want coupons to make it cheaper are fat. That is fact. If you know a person that is not that way, you are a random exception.

    P.S. - The McRib tastes like butthole. Always has and always will.

    --
    The world is how you make it
  31. Because we know too little to not ask about more. by jbn-o · · Score: 1

    Because many people are poor and lack the opportunities to get a better job than one can get working for McDonald's. Consider that we don't know the full extent of what McDonald's kept in the compromised systems. We only know from the article that McDonald's was willing to admit the data included "customers' e-mail addresses, names, addresses, phone numbers, birth dates, genders, as well as certain information about their promotional preferences and Web information interests". We don't know how the McDonald's corporation servers are organized, segregated, or if McDonald's is telling the complete truth. It's reasonable to wonder if other data was also copied.

  32. Re:McDonald's Sucks by Stregano · · Score: 1

    On the other hand, I am 1.85m and 90Kg, so it seems you not liking McDonalds doesnt work out for you, fatty.

    You can't say that word! Only we can say that word!

    --
    The world is how you make it
  33. Correction to that tweet... by Arrogant-Bastard · · Score: 1

    ...it should read "Silverpop spammers". They have a LONG history which is well known to everyone working in the field, and be readily accessed by anyone who can use a search engine (or check the Internet Archive).

    Note carefully: This doesn't mean that every message they've sent is spam -- most competent spammers these days mix spam and non-spam because it's a highly effective tactic. This also doesn't mean that every customer of theirs hired them to spam -- again, most competent spammers have a mix of customers because that also is a highly effective tactic.

    But they ARE spammers.

  34. Contests by brunes69 · · Score: 1

    You had to enter this info to play the Monopoly online contest.

    Which is actually reasonable since they need some way to contact you and verify your identity in the case of you winning a major prize.

  35. Re:McDonald's Sucks by Anonymous Coward · · Score: 0

    Where do you get charred hamster?

    pet store?

  36. Draft registration did not end in 1973 ... by perpenso · · Score: 1

    The draft may have ended in 1973 but draft registration did not. Registration may still be the law, I think I noticed the registration cards in the post office recently.

    That said, the GP's story is silly. The gov't already has your SSN, school records, etc.

    1. Re:Draft registration did not end in 1973 ... by jmac_the_man · · Score: 2

      It is the law still. And apparently, if you're not registered, you might want to post as AC.

  37. cool by deseipel · · Score: 0

    when I submitted this 5 hrs ago.

  38. let me just say by nimbius · · Score: 1

    the lengths to which McDonalds fanatics will go to secure another years appearance of the dreaded "McRib" sandwitch has stooped to a new low.

    --
    Good people go to bed earlier.
    1. Re:let me just say by dakameleon · · Score: 1

      sandwitch

      Now there's a witch that really will melt with water!

      --
      Man who leaps off cliff jumps to conclusion.
  39. Re:Slaughter by TaoPhoenix · · Score: 1

    (Rhetoric)
    I am not a stupid cow waiting for slaughter! I am unique! I celebrate my identity that lets me stand out from the crowds! I am an Archeopteryx! However, unique still doesn't beget intelligence, so they'll still get me, just with different tricks.
    (/Rhetoric)

    --
    My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
  40. Marketing company, Not McDonalds by Meest · · Score: 1

    This should read. "Marketing Company McDonalds contracted was hacked" I don't see anywhere that it says an actual McDonalds server/store system got hacked...

  41. Mint.com too by The+Clockwork+Troll · · Score: 1

    Silverpop provides Mint.com with e-mail services, too.

    Remember this e-mail SNAFU from not too long ago?

    Related?

    --

    There are no karma whores, only moderation johns
  42. bah by Anonymous Coward · · Score: 0

    I don't feel sorry for losers who wasted time going to McDonalds.com in the first place.

  43. Re:McDonald's Sucks by Fnord666 · · Score: 1

    but it tastes like a charred hamster ...

    and you know this how? On second thought, never mind. I don't want to know.

    --
    'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
  44. mcdonaldsmom.com? by lavagolemking · · Score: 1

    That a mcdonaldsmom.com exists worries me greatly.

  45. Bogus by Anonymous Coward · · Score: 0

    I work at one of those 105 orgs. We were not notified about the breach at all – in fact, I found out via an email from Deviant Art. We've contacted Silverpop & are still waiting to hear back.

  46. one bit of good news by sootman · · Score: 2

    I was mildly disgusted to see that the domain http://mcdonaldsmom.com/ actually exists. Happily, it redirects to http://www1.mcdonalds.com/momstrust/ which gives a 404. As it should be.

    --
    Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
  47. Re:McDonald's Sucks by Cimexus · · Score: 1

    McDonalds in Europe, Australia, Japan etc. are a lot nicer than the US ones. They sell wraps and decent salads and reasonably good cafe-type food. The actual restaurants themselves are generally much cleaner and have nicer decor than the American ones. So I don't mind the odd visit there. Even if I buy a big fatty burger, a couple of times a year isn't exactly going to hurt.

  48. Re:McDonald's Sucks by macshit · · Score: 1

    it tastes like a charred hamster

    Where do you get charred hamster?

    By incorrectly calculating the cooking time, when making roast hamster.

    --
    We live, as we dream -- alone....
  49. Who in their half sane mind by SpaghettiPattern · · Score: 1

    Who in their half sane mind would even need to hand over personal information?

    I mean, you pay for a hamburger with cash and last time I checked there wasn't a web store for you to need to punch in your and your family's intimate details.

    --

    I hadn't the slightest objection to his spending his time planning massacres for the bourgeoisie... (P.G. Wodehouse)
  50. prime suspect: Weight Watchers by kubitus · · Score: 1

    go and have them searched! I would not be surprised if they have all the data!

  51. How many did they say? by terbo · · Score: 1

    "McDonald's did not disclose how many people were impacted .."

    I saw a sign that said, "99 Million customers hacked".

    QOTD: "He's on the same bus, but he's sure as hell got a different ticket."

    --
    If you're interested in facts I'll tell you what they are and I'll give you sources - Chomsky on The Big Idea
  52. McD cr@p by luk3Z · · Score: 0

    I think McD and other fast foods are for stupid people who can't make meal themself or who haven't hands (for example after accidens etc.). I have fresh vegetables in my garden and I always make meal myself.

    --
    Recipes for USA bankrupt - http://tinypaste.com/0d66f dd = dollar deluge (printed in the infinity)
  53. In Soviet McDonald's by Anonymous Coward · · Score: 0

    Cardiovascular system and security block YOU !

    Yours In Akademgorodok,
    K. Trout

  54. THEY'RE NOT HACKERS FOR FUCK'S SAKE by inerlogic · · Score: 1

    "McDonald's servers were recently compromised and thieves were able to get access to customers' e-mail addresses..."

    there, fixed that for you...

    STOP USING "HACKER" IN THIS CONTEXT....

    hacking is *not* a crime, and hackers are not criminals, there's already a word for people who break into computer systems and steal data, they're called "thieves."

    if i smash you in the face with a hammer, is the headline going to read "Carpenter smashes guy in the head?"

  55. Re:McDonald's Sucks by Anonymous Coward · · Score: 0

    Eh, beh, buh, god nab it. Don't you short commies understand that this is a US site? You people can look, but not touch! Misspelled ft and capital K's... get off my lawn!

    j/k

  56. gmhowell = known /. troll who admits it by Anonymous Coward · · Score: 0

    "I saw an opportunity to troll you and get you.." - by gmhowell (26755) on Monday December 13, @06:56PM (#34541134) Homepage Journal

    FROM -> http://tech.slashdot.org/comments.pl?sid=1907528&cid=34541134

    and also this from the same exchange:

    "I never denied trolling you. And the only person I troll under the AC banner is tomhudson." - by gmhowell (26755) on Tuesday December 14, @01:55AM (#34543612) Homepage Journal

    FROM -> http://tech.slashdot.org/comments.pl?sid=1907528&cid=34543612

    No denying it, is there, gmhowell? After all, your own quoted words in black & white with the links you posted them in are difficult to deny now, aren't they? LMAO!

    You're very stupid.

    People: Don't pay this trolling douchebag gmhowell any mind, he's an incompetent out of work ignoramus who has nothing better to do than admittedly troll others here and he admits to it above in his own words quoted no less.
    (Payback's a bitch, and nobody's a bigger beyotch than gmhowell, the trolling scumbag waste of life).

  57. Silverpop by LeadSongDog · · Score: 1

    It seems Silverpop's "Permission based marketing" may come back to bite them. Just a wild guess, but could sending out a billion or so emails, tweets, facebook posts, etc possibly make you a preferred target for blackhats? And why do I think your personal data is coming soon to a Wikileaks mirror near you? http://spectrum.ieee.org/riskfactor/telecom/internet/mcdonalds-data-breach-supersized http://www.silverpop.com/blogs/email-marketing/

    --
    Oh, I'm sorry sir, I thought you were referring to me, Mr. Wensleydale.
  58. 8 new entries for my hosts file by justthinkit · · Score: 1

    # Added on Dec 15, 2010
    127.0.0.1 McDonalds.com
    127.0.0.1 365Black.com
    127.0.0.1 McDonalds.ca
    127.0.0.1 mcdonaldsmom.com
    127.0.0.1 mcdlive.com
    127.0.0.1 monopoly.com
    127.0.0.1 playatmcd.com
    127.0.0.1 meencanta.com

    --
    I come here for the love
  59. A.K.A by Mr.+Munshun · · Score: 1

    The McHack Attack?