Burger King Japan: data of about 11.18 million app members exposed
BK Japan, the company that runs Burger King restaurants in Japan, announced on 15 October 2026 that an outsider had accessed the system that manages the members of its official app.
What the company has confirmed
- The unauthorised access took place between 2 and 7 October 2026; the data leak was confirmed on 13 October.
- About 11.18 million member records are affected.
- The leaked data: member ID, email, name, phone number, date of birth, gender, prefecture, registration type, whether the email was verified and whether the member had placed app orders.
- Credit card numbers are not affected: the company does not store them. No leak of login passwords has been confirmed.
- The connection the access came from was blocked, and the investigation continues with external specialists.
- At the time of the notice, no misuse of the data had been confirmed.
What is still unknown
The company has not said how the access happened. There is no mention of money lost or of a ransom demand. App members are more likely to receive fake emails, text messages and phone calls in Burger King's name: the company advises treating them with suspicion.
Source: Nikkei, 15/10/2026 (comunicato di BK Japan / BK Japan notice)