McDonald's said that customer information was exposed after a security breach involving an email marketing management firm.
McDonald’s released a statement explaining that information was obtained by an “unauthorized third party,” but added that financial information and social security numbers were not part of the data accidentally exposed: