Burger King Japan has disclosed a major cybersecurity incident after attackers compromised a server managing its official smartphone application, exposing the personal records of approximately 11.18 million customers. According to the company’s investigation, unauthorized access occurred between October 2 and October 7, 2026, leading to the theft of customer names, dates of birth, gender, email addresses, phone numbers, and order histories. While the breached database did not store financial information or credit card numbers, the fast-food chain has reported the incident to Japan’s Personal Information Protection Commission. Authorities are working with external cybersecurity experts to investigate the intrusion, and affected users have been urged to remain vigilant against potential phishing attempts.

Full report : Hackers gain unauthorized access to Burger King server, exposes customer names, birth dates, email addresses, and phone numbers, though credit card details remain unaffected.