{"id":462044,"date":"2026-05-22T17:02:09","date_gmt":"2026-05-22T17:02:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/462044\/"},"modified":"2026-05-22T17:02:09","modified_gmt":"2026-05-22T17:02:09","slug":"mcdonalds-france-resets-accounts-after-customer-data-breach","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/462044\/","title":{"rendered":"McDonald\u2019s France resets accounts after customer data breach"},"content":{"rendered":"

\"\"<\/p>\n

McDonald\u2019s France has confirmed that attackers accessed customer loyalty account information after a breach affecting partners tied to its McDo+ rewards program.<\/p>\n

The incident led to widespread fraud in which stolen loyalty points were reportedly used to place unauthorized food orders across France.<\/p>\n

The breach came to light after numerous McDonald\u2019s France customers began receiving emails notifying them that their McDo+ loyalty identifiers had been reset \u201cas a security measure.\u201d Screenshots shared online by affected users show the company informing customers that their digital loyalty cards stored in Apple Wallet and Android Wallet had been disabled and replaced with new identifiers.<\/p>\n

\"\"@Hugo_Miskine | X<\/p>\n

French technology outlet 01net<\/a> first reported on the incident after discovering unauthorized activity on a staff member\u2019s own McDo+ account. According to the report, loyalty points accumulated over several months were redeemed for an order placed at a McDonald\u2019s restaurant in Nice, roughly 940 kilometers from the account owner\u2019s location.<\/p>\n

A growing number of similar complaints soon appeared on Reddit, TikTok, and X, where customers reported missing loyalty points and fraudulent orders tied to their accounts.<\/p>\n

Compte fid\u00e9lit\u00e9 Mcdo+ vid\u00e9 par un gars \u00e0 500 km de chez moi, plus de 300 points utilis\u00e9s. Et apparemment je ne suis pas un cas isol\u00e9. @McDonaldsFrance<\/a> il se passe quoi svp ?<\/p>\n

\u2014 Khephren84 (@Khephren84) May 14, 2026<\/a><\/p>\n

McDonald\u2019s is one of the largest fast-food chains in France, operating more than 1,500 restaurants nationwide through a mix of corporate and franchise locations. Its McDo+ loyalty program is widely used through the company\u2019s mobile app, allowing customers to accumulate points redeemable for free menu items and discounts.<\/p>\n

Cybercriminals openly advertised stolen McDonald\u2019s loyalty accounts on Telegram and Discord channels. These accounts allegedly contained valid loyalty identifiers and available reward balances that buyers could use to redeem food orders at self-service kiosks inside restaurants. Videos circulating on TikTok showed individuals demonstrating how to place \u201cfree\u201d orders using compromised accounts that did not belong to them.<\/p>\n

The fraud scheme appears to have relied on access to valid loyalty account identifiers rather than payment card theft. Buyers could reportedly either scan a compromised account barcode or manually enter the stolen loyalty ID at restaurant kiosks to redeem points attached to victims\u2019 accounts.<\/p>\n

In a statement to 01net, McDonald\u2019s France confirmed that two external partners involved in the loyalty program recently detected \u201cattempts to access customer information.\u201d The company said it took immediate action to secure the affected environment.<\/p>\n

\u201cMcDonald\u2019s France and its partners take data protection very seriously,\u201d the company stated. \u201cNo sensitive or financial data was accessed.\u201d<\/p>\n

However, the scale of customer complaints suggests attackers successfully accessed at least some loyalty account data, even if payment information was not compromised. McDonald\u2019s has since initiated a forced reset of customer loyalty identifiers to prevent further abuse.<\/p>\n

Customers using McDo+ are advised to review their recent loyalty activity, monitor for unauthorized orders, and reset passwords associated with their McDonald\u2019s accounts. It\u2019s also recommended to enable multi-factor authentication whenever available and to avoid reusing passwords across services.<\/p>\n

If you liked this article, be sure to follow us on X\/Twitter<\/a> and also LinkedIn<\/a> for more exclusive content.<\/p>\n