Burger King Japan app breach exposes about 11.18 million member records in October
Unauthorized access to the membership information system for Burger King Japan’s official app occurred from October 2 to 7, 2026, exposing about 11.18 million member records. The operator confirmed the breach on October 13 and disclosed it on October 15; the exposed information included names, email addresses, phone numbers, and dates of birth. Credit card numbers were not exposed because they were not stored, and no exposure of login passwords was confirmed. The company said it had blocked access and reported the incident to the Personal Information Protection Commission, and was investigating with outside experts and notifying customers.
Key facts
- Affected organization
- Burger King
- Incident type
- Data breach
- Occurred / detected
- 2026-10-02
- Scale of damage
- About 11.18 million official app member records exposed
- Cause / method
- Not confirmed
- Location
- Japan
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- It emerged that 11 million customer records at Burger King Japan had been exposed.
1 related reports
Other incidents at Burger King
Burger King hacked as security weaknesses raised across RBI brands
Burger King was hacked. The attackers criticized Burger King's security practices, and claims were raised that fellow RBI brands Tim Hortons and Popeyes also have vulnerabilities.
Read on Tom's Hardware ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.