The Personal data of over 2.2 million users has been leaked from McDonald's India app, McDelivery cyber security firm Fallible said.
The leaked data includes sensitive information such as name, phone number, email addresses, home addresses, accurate home coordinates and social profile links.
Cyber security experts warned people that hackers could use this information to access financial details of users, including credit card information and e-wallet details.
The compromised app and website of the US burger chain is operated by Westlife Development, which runs McDonald's operations in the south and west India.
However, McDonald's India spokesperson said, "our website and app does not store any financial data of users like credit card details, wallets passwords or bank account information. Our website and app has always been safe to use, and we update security measure on regular basis."