Burger King: unauthorized access to the official app leaked email addresses and passwords of 38 members
BK Japan, which runs Burger King in Japan, announced on 22 October 2024 that part of the member data of its official app had leaked through unauthorized access by a third party after a cyberattack on its systems. Leaks of 30 accounts were found on 15 August and 8 more on 8 October, 38 in total. Email addresses, app passwords and the brand and expiry date of registered credit cards were affected; card numbers and other data needed to use the cards were not included.
Disclosed
2024-10-22
Organizations involved
1
Leaked or at risk
38
38
Downtime
Unknown
Timeline
- Detected 2024-08-15
- Disclosed 2024-10-22
- 68 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, ChiyodaAccommodation, food and drink38 leaked
BK Japan Inc.
Sources
- [1][News]不正アクセスでバーガーキング公式アプリの会員情報が漏えいScanNetSecurity · 2024-10-31
- [2][News]「バーガーキング」公式アプリで情報漏えいASCII.jp