Now Hacked
EN
Data breach

Customer data breach at Papa John's and Mustit

First reported · Last reported · 3 related reports

A customer personal data breach occurred at Papa John's and Mustit. Abnormal access was detected on May 6–14 and June 9, 2025, through an API that allowed some personal information to be queried without authentication. The companies announced that up to nine data items, including member number, user ID, name, date of birth, mobile phone number and address, may have been leaked.

Key facts

Affected organization
Papa John's
Incident type
Data breach
Occurred / detected
2025-05-06
Scale of damage
Possible leak of up to nine data items, including member number, user ID, name, date of birth, mobile phone number and address
Cause / method
Abnormal access to an API that allowed some personal information to be queried without authentication
Location
South Korea

If your data was exposed

Exposed dataNamePhone numberAddressDate of birthUsername

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  3. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Abnormal access occurred until May 14 through an API that allowed some personal information to be queried without authentication.
  2. Abnormal access to the API occurred again.
  3. The customer data breach at Papa John's and Mustit and the possible leak of up to nine data items were reported.

3 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.