バーガーキング・ジャパン(公式アプリ)Data breach / unauthorized access incident
- Occurred on
- October 2, 2026
- Announced on
- October 15, 2026
- Severity
- SSLarge-scale compromise of sensitive data such as payment or identity-verification records affecting millions.
- Scale
- 11,180,000 records
- Main impact
- Due to unauthorized access by a third party to the system managing official app member information, about 約1,118万件 of member data (member ID, email address, name, date of birth, telephone number, prefecture, gender and other personally identifiable information) were leaked externally. The company does not hold credit card numbers and no leakage of them has been confirmed, and leakage of login passwords has not been confirmed at this time; detailed intrusion routes and some of the leaked items are under investigation and may be updated.
- Information involved
- Email addressUser / member IDFull namePhone numberDate of birthHome address
- Cause / key point
- An investigation by an external specialist organization confirmed unauthorized access by a third party to the member information management system, and the intrusion period has been disclosed as 2026-10-02～2026-10-07. The detailed intrusion route and some of the items leaked remain under investigation.
- Industry
- Food & dining
- Listing / capital
- Unlisted
- Sources
- Last updated
- October 22, 2026
Is this incident worth paying attention to?
Written & reviewed
Reviewed byYutaro SasaoFounder & CEO, MediaLeap Inc.
CEO of MediaLeap Inc. Working on both sides of web advertising and web media since 2013; founded the company in May 2025.
Review scope: cross-checking against primary sources (official and government announcements), verifying claims stay within the facts, and checking source attribution。Last reviewed:
Written by:Leak Watch editorial team (AI-assisted drafts verified against sources by the editorial team) · Reviewer profile · Request a correction
Related incidents
Browse the database →Incidents sharing the same company, service, attack method or industry (grouped automatically from the disclosures).
Incidents related to "クレジットカード"
Incidents where the damage spread through the same service or system.
- SSリクルート（カーセンサーnet、C-MATCH）2026.10.21 announced・Affected 3,709,551 records
- A株式会社日建学院（事前確認講習システム） / （公財）マンション管理センター2026.10.20 announced・Affected 3,597 people
- Aニフティ（回線申込・受付管理システム）2026.10.19 announced・Affected 542,513 records
- Bデーリー東北新聞社（受注制作Webページ）2026.10.16 announced・Affected 423 records
- SSソースネクスト2026.10.15 announced・Affected 22,519,960 records
- SSSアドベンチャー（スカイチケット）2026.10.10 announced・Affected 14,640,000 records
Incidents related to "ログインパスワード"
Incidents where the damage spread through the same service or system.
Same attack method
- Bユミルリンク（メール配信システム）2026.10.19 announced・Affected 9,000,000 records
- SSタイムズカー(タイムズモビリティ)2026.09.25 announced・Affected 6,600,000 accounts
- Sブックオフグループ(ブックオフコーポレーション)2026.10.09 announced・Affected 6,383,279 people
- Sヤマト運輸(クロネコ代金後払いサービス)2026.09.29 announced・Affected 5,310,000 records
- Aビューカード（VIEW’s NET）2026.10.09 announced・Affected 4,030,000 records
- S2りんかんイエローハット2026.06.19 announced・Affected 3,180,000 people
Same industry
- SSライドオンエクスプレス（『銀のさら・釜寅・すし上等』公式サイト・公式アプリ）2026.10.13 announced・Affected 6,500,000 records
- SSニチレイグループ2026.09.18 announced・Affected Unknown
- Sアサヒグループホールディングス2026.07.17 announced・Affected 1,525,000 records
- S佐嘉平川屋2026.06.15 announced・Affected Unknown
- Aカルビー（絶品部「やめられない、とまらない」課）2026.10.09 announced・Affected Unknown
- A湖池屋（湖池屋GOGO!ランド）2026.10.09 announced・Affected 1,800 accounts
Attack method classification: Unauthorized access (method undisclosed)(Breached, but the technique was not identified or disclosed)
Read the Unauthorized access (method undisclosed) guide and national trends →