McDonald’s France hit by data leak affecting loyalty accounts

Thursday 21 May 2026 - 12:00

McDonald’s France has confirmed it recently experienced a data security incident involving its customer loyalty program, leading to unauthorized use of reward points from several accounts.

According to the company, cyber attackers were able to exploit weaknesses that allowed them to access loyalty accounts and use accumulated points to obtain discounts on orders without the knowledge of customers. The incident has affected a number of users, although the exact scale has not been publicly disclosed.

The fast-food chain stated that corrective measures were quickly implemented to contain the breach. Security teams, along with external partners, detected unusual access attempts and acted immediately to secure the system. The company emphasized that no sensitive personal or financial information appears to have been compromised.

As a precaution, McDonald’s France reset customer login credentials across its platform to prevent further unauthorized access. The company also advised users to monitor their accounts and continue using official support channels for any concerns related to loyalty points or account security.

Cybersecurity experts note that loyalty programs are increasingly targeted by hackers, as they can be exploited for financial gain without directly accessing banking systems. The incident highlights the growing importance of digital security in customer reward platforms.