Millions of Russian fast food fans hit in Burger King Russia hack
Data stolen years ago finally surfaced on the web, showing 3.2 million Burger King Russia victims.
In October 2024, Burger King Russia fell victim to a hacking incident, exposing the personal data of 3.2 million customers. The breach occurred through Mindbox, a Russian marketing automation platform the company used for customer information management. The leaked data included emails, names, genders, birth dates, phone numbers, and geolocations from the period of 2018 to August 2024.
Although no payment details were compromised, customers were warned about potential phishing and identity theft risks. Mindbox, which provides tools for email, SMS campaigns, push notifications, loyalty programs, chatbots, and more, had been utilized by over 1,100 businesses, including multinational corporations like L'Oréal, Panasonic, KFC, JBL, and United Colors of Benetton.
The data breach was Mindbox's first serious security incident, which was quickly detected and contained thanks to the company's threat detection tools. Following the attack, Mindbox implemented various security measures, including limiting project access scenarios, introducing mandatory two-factor authentication, and enhancing internal role systems to ensure stricter permission controls.
The exposed data, though dated, remains valuable for identity theft, social engineering, and similar attacks.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
