Burger King Japan data breach exposes over 11 million customer records

Burger King Japan has suffered a data breach that exposed personal customer information, according to CPO Magazine and Business Insurance. CPO Magazine and Business Insurance both reported that the incident affected over 11 million customer records. Additionally, eSecurity Planet reported that the firm confirmed 11.18 million customer records were exposed in the breach. [1][8][9]

The incident comes during a wave of significant cybersecurity events impacting Japanese organizations. As FTMQ Security reported earlier, entertainment company Daiichi Kosho disclosed a malware infection at contractor Nippon Columbia that exposed more than 8.7 million customer and employee records. Japan also declared its first national cyberspace emergency on October 9, 2026, following automated ransomware attacks through cloud provider IDC Frontier that exposed personal information belonging to more than 14 million citizens. [13][14]

Separately, multiple outlets reported on a data breach involving the State Bank of India. The Hacker News reported that the bank identified 3,897 customer records containing personal information within a larger set of about 375,000 records discovered on the dark web. The Hacker News noted that the State Bank of India does not yet know the original source of the leaked data. [6]

Reports differed on the exact total of leaked customer data associated with the State Bank of India breach on the dark web. CyberSecurityNews reported that more than 3,000 customer records were exposed, while ETV Bharat reported that 375,000 records were leaked. GBHackers News similarly reported that the incident allegedly exposed the personal information of 3.75 lakh users. [2][3][4][5]