Well-done hack flames 3.2M Burger King Russia users
HIBP confirms cybercrims stuck a straw into marketing reservoir, sucking up six-years of leaky Whopper secrets
In a significant data breach, cybercriminals compromised the personal information of approximately 3.2 million Burger King Russia patrons in an attack on the company's marketing platform, Mindbox, in August 2024. The leaked data, compiled by Troy Hunt's Have I Been Pwned (HIBP), included customers' names, dates of birth, email addresses, phone numbers, genders, and approximate geographic locations.
Burger King confirmed the breach in October 2024, emphasizing that no payment or passport data was compromised. The stolen information dated back to May 2018, encompassing over six years of customer data. Russian cybersecurity news outlet Xakep suggested that the breach at Mindbox was the work of a single intruder and possibly linked to other cyber incidents, including the hacking of Detsky Mir, Russia's largest children's toy retailer, which reportedly affected more than 1 million customers.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
