Wyndham app password exposed a database with millions of entries

A hardcoded password in Wyndham’s Android app opened a Salesforce database with millions of entries. Wyndham revoked it but would not say whether customer data was accessed.