> JapanHacked_
[Contained][Severity: Critical][Intrusion]

Burger King: unauthorized access to the official app leaked email addresses and passwords of 38 members

BK Japan, which runs Burger King in Japan, announced on 22 October 2024 that part of the member data of its official app had leaked through unauthorized access by a third party after a cyberattack on its systems. Leaks of 30 accounts were found on 15 August and 8 more on 8 October, 38 in total. Email addresses, app passwords and the brand and expiry date of registered credit cards were affected; card numbers and other data needed to use the cards were not included.

Disclosed

2024-10-22

Organizations involved

1

Leaked or at risk

38

38

Downtime

Unknown

Timeline

  1. Detected 2024-08-15
  2. Disclosed 2024-10-22
  3. 68 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[E-mail address][Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][News]不正アクセスでバーガーキング公式アプリの会員情報が漏えいScanNetSecurity · 2024-10-31
  2. [2][News]「バーガーキング」公式アプリで情報漏えいASCII.jp