BK Japan discloses theft of 11.18 million app member records

BK Japan disclosed on October 15 that an attacker stole personal information from about 11.18 million official app member records, Hackread reported. The unauthorized access occurred between October 2 and 7; the company discovered the leak on October 13. Exposed information included names, phone numbers, email addresses, birth dates and member IDs. Mobile ordering information indicated whether members had an order history, rather than specific purchases. BK Japan blocked connections from the source involved and reported the breach to Japan's Personal Information Protection Commission. The affected system held no credit card numbers. The company had confirmed neither password leakage nor fraudulent use of the exposed information.