Burger King Japan Data Breach
BK Japan Holdings, the operator of Burger King in Japan, disclosed an unauthorized server intrusion impacting the database of its official smartphone ordering application.
Exposed Data Types
6- Names
- Email addresses
- Phone numbers
- Dates of birth
- Genders
- Geographic locations
About This Breach
The incident, which occurred between October 2 and October 7, 2026, compromised approximately 11.18 million customer records. Exposed information includes full names (in Kanji and Kana), email addresses, phone numbers, dates of birth, gender, prefecture of residence, and mobile membership identifiers. BK Japan confirmed that payment card information and passwords were not stored on the affected server.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
