McDonald's India exposed the personal information of customers and drivers due to security flaws impacting its APIs.