Burger King Japan app breach exposes around 11.18 million member records in October
Unauthorised access to the membership information system for Burger King Japan’s official app occurred from 2 to 7 October 2026, exposing around 11.18 million member records. The operator confirmed the breach on 13 October and disclosed it on 15 October; the exposed information included names, email addresses, telephone numbers and dates of birth. Credit card numbers were not exposed because they were not stored, and no exposure of login passwords was confirmed. The company said it had blocked access and reported the incident to the Personal Information Protection Commission, and was investigating with external experts and notifying customers.
Key facts
- Affected organisation
- Burger King
- Incident type
- Data breach
- Occurred / detected
- 2026-10-02
- Scale of damage
- Around 11.18 million official app member records exposed
- Cause / method
- Not confirmed
- Location
- Japan
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- It emerged that 11 million customer records at Burger King Japan had been exposed.
1 related reports
Other incidents at Burger King
Burger King hacked as security weaknesses raised across RBI brands
Burger King was hacked. The attackers criticised Burger King's security practices, and claims were raised that fellow RBI brands Tim Hortons and Popeyes also have vulnerabilities.
Read on Tom's Hardware ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.