# Wyndham revokes app credential that exposed customer data

_Published Monday, November 9, 2026 at 7:02 PM EST · Security · Latest · Tier 2 — Notable_

![Wyndham revokes app credential that exposed customer data — Primary](https://techcrunch.com/wp-content/uploads/2026/11/wyndham-967205948.jpg?resize=1200,843)

Wyndham revoked a password embedded in its Android app after security researcher Robert Wiggins found it could unlock an internal Salesforce-hosted database, TechCrunch reported. Wiggins said the database exposed customer names, email addresses, membership numbers and login tokens that keep users signed into their apps.

The database contained millions of entries, but Wiggins could not determine the number of exposed customer records. Wyndham said it had no evidence of unauthorized access. The company declined to say whether it had logs or other technical means to establish whether anyone accessed the database before the discovery.

## Sources

- [TechCrunch](https://techcrunch.com/2026/11/09/hotel-giant-wyndham-exposed-customer-data-after-app-security-lapse/)

---
Canonical: https://techandbusiness.org/newswire/-SARfq1TQtDBOwelNHW44J
Published: 2026-11-10T00:02:38.169Z
Story chronology: 2026-11-09T23:03:46.000Z
Retrieved: 2026-11-10T03:08:11.776Z
Publisher: Tech & Business (techandbusiness.org)