← Today's brief

Security · Updated 16 Oct, 05:31 pm IST

Burger King Japan breach exposed 11.18 million app user records

Image: BleepingComputer

Why it matters for readers: It explains what types of customer information were taken and reassures that payment card numbers and login credentials were reportedly not exposed.

  • Attackers accessed a server containing 11.18 million customer records between October 2 and October 7, 2026.1
  • Breached data included names, dates of birth, gender, email addresses, phone numbers, and order history from the app.1
  • Burger King Japan said the compromised server did not store customer credit card numbers and found no evidence that user credentials were accessed.1
  • The company concluded a follow-up investigation on October 13, 2026, blocked access from the source, apologized to affected customers, and reported the breach to Japan's Personal Information Protection Commission.1

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started