Burger King Japan app member system breached in early October, leaking about 11.18 million names, emails and phone numbers

According to Impress Watch, BK Japan, which runs Burger King in Japan, announced on October 15 that a third party accessed its official app member system without authorization, leaking about 11.18 million member records ^[1]. The access took place from October 2 to 7 and the leak was confirmed on the 13th; data includes member IDs, emails, names, phone numbers, birth dates, gender and prefecture, while the company holds no card numbers and has found no password leak or secondary damage ^[1][2]. Members receiving suspicious emails, texts or calls posing as Burger King should not open links or attachments or enter member data or passwords ^[2].

Industries mainly affected: Retail

1. Beware of emails, texts and calls impersonating Burger King ^[2].
2. Do not open links or attachments or enter member data or passwords in suspicious messages .