McDonald’s Indonesia Exposes Over 40 Million Records in Data Breach Cybersecurity researchers at Cybernews uncovered a significant data exposure involving McDonald’s Indonesia, which left over 40 million records vulnerable. Of these, 28 million were customer records, including sensitive details such as names, email addresses, phone numbers, and device IDs. The breach also exposed 71,000 corporate records, primarily related to advertising campaigns, putting both personal and internal business data at risk. The exposed data increases the likelihood of social engineering attacks, such as phishing emails and scam calls, as well as loyalty fraud due to compromised transaction information. The database has since been secured and is no longer publicly accessible. The incident highlights ongoing risks in customer data management, particularly for large-scale enterprises handling vast amounts of personal and operational information. No further details on the cause of the exposure or potential misuse of the data have been disclosed.