Burger King Japan (BK Japan) has revealed a substantial data security breach after an external party infiltrated a server holding 11.18 million user records.
An outside entity obtained unauthorised entry into the system that is used to store account details for its mobile application, according to a BleepingComputer report.
Go deeper with GlobalData
Discover B2B Marketing That Performs
Combine business intelligence and editorial excellence to reach engaged professionals across 36 leading media platforms.
The data was accessed between 2 October and 7 October, with the resulting compromise of data confirmed internally on 13 October.
Information exposed during the incident encompasses members’ full names, email addresses, telephone numbers, birth dates, gender, and prefecture.
The affected records also include user identification numbers, registration classifications, mobile ordering history status, and whether email verification had been completed.
The company has advised registered patrons to exercise caution regarding deceptive emails, SMS communications, and telephone calls seeking to impersonate BK Japan.
It recommended that users avoid opening attachments, navigating to linked web addresses, or submitting account details and passwords.
The company added that the compromised infrastructure did not retain customer payment card information, and its review has found no indication that user log-in credentials were obtained by the intruders.
BK Japan has formally notified Japan’s Personal Information Protection Commission (PPC) regarding the occurrence and is continuing an investigation alongside external cyber security specialists to determine how the server was breached.
In a statement BK Japan said: “We sincerely apologise for the great inconvenience and concern this situation has caused to our customers and all others involved.
“At this time, no secondary damage, such as fraudulent use, resulting from this incident has been confirmed.”
