Burger King Japan, the Japanese subsidiary of fast-food giant Burger King revealed it had suffered a significant data breach. Founded in 1953, Burger King has around 20,000 locations globally that includes 350 in Japan.

The Japanese subsidiary stated “We sincerely apologize for the great inconvenience and concern this situation has caused to our customers and all others involved. At this time, no secondary damage, such as fraudulent use, resulting from this incident has been confirmed.”

The breach was detected on October 13, 2026. The unauthorized access took place between October 2 and October 7. BK Japan disclosed the incident publicly on October 15. This data breach has been reported to Japan’s Personal Information Protection Commission (PPC). The cyberincident is being investigated with the help of external cybersecurity professionals.

Cyberattackers breached the membership system behind Burger King Japan’s official smartphone app. The company has informed that the breach leaked approximately 11.18 million records of member information. As per BK Japan, compromised records included member IDs, email addresses, names in kanji and kana, telephone numbers, dates of birth, gender, prefecture of residence, registration type, mobile-order history flags, and email-verification status.

The stolen data can be used for committing fraud and identity theft. Customers have been urged to ignore unsolicited email, phone, or text requests containing links.

SOURCES:-

https://www.bleepingcomputer.com/news/security/burger-king-japan-data-breach-exposes-11-million-customer-records/

https://cybernews.com/security/burger-kings-app-data-breach/

https://www.yahoo.com/news/world/articles/burger-king-japan-breach-hits-183633983.html

https://securityaffairs.com/201119/security/burger-king-japan-data-breach-impacted-11-million-customers.html

https://the420.in/burger-king-japan-app-data-breach/