The Starbucks app stores usernames, emails, and passwords in plaintext, putting users at risk if their phone is compromised. Security expert Robert Siciliano warns that password reuse across sites could amplify the damage. Starbucks says it has added safeguards and set up a dedicated phone line for concerned customers.
Chapters
Starbucks mobile app leaving customers wanting an extra shot of security. The major loophole that could leave your passwords open for attack. Customers with the app can buy drinks and food right from their phones.
Mm, but according to a new report, the app saves personal info in plaintext, and that is simply dangerous. Dan Bones joins us from the newsroom with more. Dan.
Darius, Steve, Starbucks says its mobile app is the fastest way to pay. The software allows users to browse between drinks and also store locations. And while it appears no customers have fallen victim, a new A new report says that this app is leaving people's data potentially vulnerable.
It's nerve-wracking because, like, Starbucks are what I get when my family members don't know what to give me for the holidays.
Whether it is one pump or two.
Well, I really like the pumpkin spice latte, but I get it with one pump.
A latte, espresso, or just a straight-up roast.
Better drinks are good too.
If you're using the Starbucks mobile app to pay for these gourmet beverages, a new report says your security could be at risk.
That's kind of scary. So, I know I wouldn't be putting it on my phone.
According to a report by Computerworld, Starbucks is storing usernames, email addresses, and passwords in open text. That means if a hacker stole your phone, they could plug it into a computer and recover your password. In a statement, Starbucks says no customers have been impacted, but security expert Robert Siciliano says it should serve as a wake-up call.
Or if they knew your Starbucks password and that was the same for your Bank of America password, you could be in some real trouble.
Usually your username is your email address and your password is whatever your password is. And if your username and password are the same for every website, you're in big trouble if there's a compromise.
At a Starbucks on the Upper East Side, manager Paul Watkins says he hasn't heard of any complaints from his patrons.
We're really just focusing on that we are securing the issue, making sure that the app is accessible for all of our customers, making sure that it's really accessible and that it is protected no matter No matter what.
This woman had wiped the app clean from her phone, but she's not wiping the caffeine from her diet.
People are suckers for the old gingerbread latte, so they're not like— they're not gonna be able to permanently scare anybody away.
Now, Starbucks Chief Information Officer Kurt Garner posted this letter to the company's website earlier. It says again that no customers have been victimized, but the company, quote, takes these types of concerns seriously, and they've added several safeguards to protect the information that you share with the company. They've also added an 800 number for any customers who have concerns. Darian, Steve, back to you.
