“My hunch was that in the rush to push their new shiny product, someone would take a shortcut…”
Chattr.ai runs AI hiring for Applebee’s, Chick-fil-A, KFC, Subway, Taco Bell and Wendy’s. Its Firebase database let anyone who registered read and write everything. That meant applicant names, phone numbers, shifts and some plaintext passwords. Chattr patched it in a day and closed the ticket without a reply. Job applicants hand their data to a startup they never chose, and nobody tells them when it leaks.