McDonald’s App Hacked in Canada by Unscrupulous Hamburglar | Eater

"Since January, a persistent fraudster (dubbed the “Quebec Hamburglar” in Canadian media) has been hijacking app accounts to place large pickup orders in Quebec, charging hundreds or thousands of dollars to customers’ linked cards—one Toronto tech writer, Patrick O’Rourke, had $2,034 charged for McNuggets, Big Macs, McFlurries and poutine. Many victims report having to pursue refunds through their banks rather than receiving prompt help from the company, and critics say the company’s response has been negligent, failing to proactively warn users or prompt password resets. Security-conscious users are being advised to remove stored payment options and delete the app until stronger protections (such as two-factor authentication) and more proactive customer-service measures are implemented." - Jenny G. Zhang