Information about this incident and a simple way to see if you may qualify to be connected with independent attorneys.
On October 30, 2026, TechCrunch reported that a security researcher found a password for an internal Applebee's customer database embedded in the source code of the Applebee's Android app, which has more than one million downloads on Google Play. According to the report, anyone who extracted the credential from the app could have accessed records of registered Applebee's customers. TechCrunch verified the finding. The exposed database reportedly contained:
Applebee's parent company, Dine Brands, says it fixed the issue, that its investigation is ongoing, and that it has not currently found evidence of unauthorized access. The company has not said how many customers were affected or how long the credential was in the app. Applebee's had at least 8.5 million rewards members as of last year.
If you have an Applebee's online account or use the Applebee's app, you can see if you may qualify to connect with an independent attorney.
Possible remedies, if any, depend on the facts of your situation and applicable law. No outcome or payment is guaranteed.
Read the original public notice or report about this incident (opens in a new tab):
DataBreachRelief.com is not a law firm and does not provide legal advice. We are an independent information and referral service. Information you submit may be shared with one or more independent law firms that may contact you about your potential claim. Submitting information does not create an attorney-client relationship. Listing an incident does not mean a lawsuit has been filed, and no outcome is guaranteed. Attorneys who receive referrals may pay us a fee for advertising or lead services.