Burger King Japan says attackers broke into a server used by its official smartphone app and exposed 11.18 million customer records. The company said unauthorized access occurred from October 2 to October 7, 2026, and affected data includes names, dates of birth, gender, email addresses, phone numbers, and order history. Burger King Japan said the compromised server did not store payment-card numbers and that it has not found evidence customer passwords were accessed.
Why it matters: Affected customers face a real risk of convincing phishing, smishing, and scam calls using their personal details and order history. Users should be wary of messages claiming to be from Burger King Japan, while defenders should watch for follow-on impersonation and credential-harvesting campaigns.
Sergiu Gatlan
2026.10.16
100% relevant
This article appears to be the first concrete breach disclosure establishing the Burger King Japan customer-data exposure as a trackable incident.
← Back to all stories