McDonald's Canada says the jobs section of its website has been hacked, compromising the personal information of about 95,000 applicants over the last three years.
The company says the accessed information included names, addresses, phone numbers, employment histories and other standard job application information.
But McDonald's says the site doesn't collect social insurance numbers, banking information or health information.
CJAD 800's tech expert Carmi Levy says the hack is serious business.
"If you are one of those 95,000, this is as bad as it gets," he says. "For example, if I know your name, your address, your email address and a few other disaparate pieces of information, I could use that to apply for a credit card under your name and run up a big bill, I could use it to book airline tickets and get someone else to pay for them, I could ruin your credit score...I could do all sorts of things to wrack absolute havoc with you."
Levy also says that even if the hackers don't have your SIN number or anything else beyond your basic information, an enterprising hacker could use the basic information they have to find out more about you.
In a statement, McDonald's Canada says it is investigating and apologizes to those affected. The company says it will soon notify anyone who may potentially be impacted.
It advises anybody interested in applying for a job to do so in person at any McDonald's Canada restaurant.
McDonald's has more than 1,400 restaurants in Canada and more than 80,000 Canadian employees.
-CJAD 800's Richard Deschamps contributed to this report.