Wyndham's mobile app exposed a key to customer data A researcher found a credential embedded in the Android app that opened a Salesforce database. Wyndham revoked it, but has not explained past access or token invalidation.