[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-burger-king-japan-breach-exposes-1118-million-app-members":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},11804,"burger-king-japan-breach-exposes-1118-million-app-members","Burger King Japan Breach Exposes 11.18 Million App Members","Names, birth dates, phone numbers and order histories were taken from the chain's app system in early October, though payment data was not exposed.","If you have an account on the Burger King Japan app, assume your name, phone number and email address are now in someone else's hands, and treat unexpected messages that use them with suspicion.\n\nThe company said 11.18 million customer records were taken from the system that manages member information for its official app. The data covers names, dates of birth, genders, email addresses, phone numbers and order histories. Credit card and other payment data was not exposed, the company said.\n\nAccording to its notification letter, unauthorized access occurred between October 2 and October 7. The company determined on October 13 that member information had leaked, blocked access from the source in question, and reported the incident to Japan's Personal Information Protection Commission. It said it has confirmed no fraudulent use so far. It did not say how the intruders got in. Have I Been Pwned, the site that lets people check whether their details have surfaced in breaches, does not list the incident.\n\nThe missing payment data is a real mercy, but contact details paired with order histories are what make phishing convincing. A message that knows your name and your usual order looks a lot like a genuine promotion.\n\nThere is a tempting comparison with Burger King's Russian arm, which was hit in 2024 through Mindbox, a marketing automation vendor, with that data leaking online in late September this year. Nothing in the material links the two incidents, and they involve different subsidiaries. Still, Mindbox's fixes are instructive: stricter permissions, a second employee to confirm access, and mandatory two-factor authentication. Those point to weak access controls rather than a software flaw, though Mindbox did not say so outright.\n\nThe open question in Japan is whether the entry point was a vendor or Burger King's own system. That answer decides whether other companies share the exposure.","[\"data-breach\",\"burger-king\",\"phishing\",\"japan\"]","2026-10-19T12:05:00.000Z","2026-10-19T14:13:34.588Z","2026-10-19T14:13:36.987Z","published",null,[],"security",[26,27,28,29],"data-breach","burger-king","phishing","japan",[31],{"name":32,"url":33},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fwhopper-of-a-data-breach-sees-burger-king-japan-expose-over-11-million-customer-records",0,{"sections":36},[37,42,46,51,56,61,66,71,76,81,86,91,96,101],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",7040,"2026-10-18T11:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",1011,"2026-10-19T17:00:00.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",542,"2026-10-19T07:43:19.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",531,"2026-10-19T17:21:45.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",268,"2026-10-19T15:49:37.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",242,"2026-10-19T18:10:55.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Science","science",205,"2026-10-19T10:00:00.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Startups","startups",134,"2026-10-18T12:02:57.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",130,"2026-10-19T17:26:40.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",118,"2026-10-16T15:52:39.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"General","general",86,"2026-10-19T15:44:20.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",78,"2026-10-19T12:01:04.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",37,"2026-10-14T10:00:00.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]