Well-done hack flames 3.2M Burger King Russia users
HIBP confirms cybercrims stuck a straw into marketing reservoir, sucking up six-years of leaky Whopper secrets
Russian Burger King customers have been significantly impacted by a major data breach in August 2024, as cybercriminals stole personal information belonging to 3.2 million individuals. Mindbox, Burger King Russia's marketing platform, was hacked, leading to the extraction of names, dates of birth, email addresses, phone numbers, genders, and approximate geographic locations.
The attackers did not manage to obtain financial or passport details, as confirmed by Burger King. The compromised data spanned over six years, dating back to May 2018, and reportedly contained more than 5.6 million lines of information, including customers' favorite dishes and previous order dates. Russian cybersecurity news outlet Xakep suggests the breach at Mindbox was carried out by a single intruder, with other stores like Detsky Mir, Russia's largest retailer of children's toys, also reportedly affected.
Burger King acknowledged the situation in October 2024, stating that personal data did not include payment details, as the third parties handling transactions did not have access to that information.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
