Ordering food through an app seems like a really convenient way to get what you want. For fans of the Golden Arches, McDonald's Canada offered such an app, allowing hungry customers to place mobile orders for pickup. However, the McDonald's app has been hacked in Canada by so-called "Hamburglars" placing orders on other people's accounts.
There has already been a number of instances in which a person's account on the app, which includes added payment information from either a debit or credit card, was hacked by a third party who used the account to place food orders, sometimes in entirely different provinces.
Patrick O'Rourke, a writer at Mobile syrup, detailed his own experiences in being defrauded through the app. While O'Rourke lives in Toronto, someone had used the payment information on his account to place $2,000 worth of orders around Montreal.
Similarly, Patty Duke, an Ontario resident, had $100 worth of McDonald's meals charged to her account somewhere in Laval, Quebec.
"I thought it was an error at first because I couldn’t believe that I’d place four separate orders all to the same McDonald’s within minutes of each other," Duke told CTV News. "It didn’t make a whole lot of sense."
My McDonald’s mobile order app has been hacked and someone in Quebec is ordering literally thousands of dollars wor… https://t.co/eMcW37Q0Zl— Patrick O'Rourke (@Patrick O'Rourke) 1555629311.0
There have been other instances of people using the app and having their account hacked, with a number of the orders being placed somewhere in Quebec. Some customers shared their frustration on Twitter and received responses from McDonald's Canada.
"@McDonalds @McDonaldsCanada Woke up today to see a $25 charge on my app from Quebec. I'm in Winnipeg. I'm now the third person I know of that this has happened to," Twitter user @im_FFBF00 wrote.
"@McDonaldsCanada so not impressed with the security of your APP! Was just hacked and the hacker was able to make purchases of almost $100 and I can’t get into my account to delete my payment info or change my password! 😡😡😡😡😡😡😡" wrote @Shan_104.
@McDonalds @McDonaldsCanada Woke up today to see a $25 charge on my app from Quebec. I'm in Winnipeg. I'm now the t… https://t.co/3mLDMm3dpg— Amber (@Amber) 1572101129.0
@McDonaldsCanada so not impressed with the security of your APP! Was just hacked and the hacker was able to make pu… https://t.co/IF5RQ0SlUi— Shannon (@Shannon) 1571545971.0
McDonald's Canada replied to both tweets requesting more information from the customers.
@im_FFBF00 Hi Amber. We're sorry to hear this and we'd like to gather some further details from you. Please give us… https://t.co/mk4t9jl0qV— McDonald's 🇨🇦💜 (@McDonald's 🇨🇦💜) 1572210321.0
@Shan_104 Hi Shannon. We'd like to gather some information from you about this. When you have a chance, please call… https://t.co/Ee00g2a7ja— McDonald's 🇨🇦💜 (@McDonald's 🇨🇦💜) 1571602863.0
In an email to Narcity, Ryma Boussoufa, a spokesperson for Mcdonald's Canada, wrote, "While we are aware that some isolated incidents involving unauthorized transactions have occurred, we remain confident in the security of our app."*
Boussoufa recommended customers use strong passwords for their accounts and that they refrain from sharing passwords as well.*
"If a guest has experienced an unauthorized transaction, they are prompted to notify their financial institution, who will investigate the charge," Boussoufa wrote in the same email to Narcity.* "In some cases, coupons may have been provided as a form of goodwill for the guests' inconvenience."
On Twitter, McDonald's Canada claimed that they could not provide refunds due to how their app works, writing, "The payment information on the app is not stored in our system. Our system holds a unique token with your payment provider, which allows purchases via the app. This token doesn't work both ways and we're unable to reverse charges. Only the payment provider can reverse a charge."
@serbanadian @CAdoubleS The payment information on the app is not stored in our system. Our system holds a unique t… https://t.co/HvyFaPZgTm— McDonald's 🇨🇦💜 (@McDonald's 🇨🇦💜) 1564082815.0
McDonald's has used the app in the past for promotional purposes, such as offering customers free orders of medium fries, and even offering them free cheeseburgers. They have also used the app to offer free coffees to their customers.
*This article has been updated.