A Lot Can Happen Over Coffee: Hacking Café Coffee Day

Café Coffee Day's tagline is "A Lot Can Happen Over Coffee." They weren't kidding. Over two evenings in July 2026, working from nothing but curiosity and a copy of their Android app, I found a chain of vulnerabilities that, stitched together, handed me the phone numbers, emails, invoices and eventually the accounts of what looked like every CCD customer in the country. All of it starting from a…