Burger King Japan reports unauthorized access affecting about 11.18 million app members

B.K. Japan, the operator of Burger King in Japan, announced on October 15, 2026, that a third party had illegally accessed the system managing membership information for its official app and that information on about 11.18 million members had been leaked externally.²Backed by 2 sourcesnews.web.nhkinternet.watch.impress.co.jp The affected information includes members’ names and email addresses, while other reports based on the company’s notice identify additional personal-data fields such as member IDs, dates of birth, and telephone numbers.¹Backed by 1 sourcesissoh.co.jp

The company said its investigation found unauthorized access between October 2 and October 7, after it identified the possibility of an intrusion and examined the relevant system.¹Backed by 1 sourcesinternet.watch.impress.co.jp The available reporting says the handling of login passwords had not been confirmed as a leak, although the full scope of the affected data and the status of individual members remained subject to confirmation.¹Backed by 1 sourcesissoh.co.jp