Burger King Japan
Oct 2026 · Graded Attested · Retail and Consumer · Beyond the filings
Incident summary
Burger King JapanOct 2026
Not yet quantified
AAttestedAn outside party spent October 2 to October 7, 2026 inside BK Japan's app member system, reaching about 11.18 million records: names, email addresses, and mobile order history. How they got in, and who they were, the source does not say. Every member in the app sat behind one store of identity, a single failure domain the size of the entire loyalty program. No card data, the company stresses. Just a record of what each person ordered, tied to a name and an inbox.
Retail and Consumer
Burger King Japan data breach exposes 11 million customer records
Initial attack type not disclosed · Impact data theft inferred
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.