{
  "id": 9355499,
  "title": "Millions of Russian fast food fans hit in Burger King Russia hack",
  "url": "https://urgent.news/2026/09/23/millions-of-russian-fast-food-fans-hit-in-burger-king-russia-hack",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-23T15:10:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/millions-of-russian-fast-food-fans-hit-in-burger-king-russia-hack"
  },
  "original_language": "en",
  "account": "In October 2024, Burger King Russia fell victim to a hacking incident, exposing the personal data of 3.2 million customers. The breach occurred through Mindbox, a Russian marketing automation platform the company used for customer information management. The leaked data included emails, names, genders, birth dates, phone numbers, and geolocations from the period of 2018 to August 2024. Although no payment details were compromised, customers were warned about potential phishing and identity theft risks. Mindbox, which provides tools for email, SMS campaigns, push notifications, loyalty programs, chatbots, and more, had been utilized by over 1,100 businesses, including multinational corporations like L'Oréal, Panasonic, KFC, JBL, and United Colors of Benetton. The data breach was Mindbox's first serious security incident, which was quickly detected and contained thanks to the company's threat detection tools. Following the attack, Mindbox implemented various security measures, including limiting project access scenarios, introducing mandatory two-factor authentication, and enhancing internal role systems to ensure stricter permission controls. The exposed data, though dated, remains valuable for identity theft, social engineering, and similar attacks.",
  "summary": "Data stolen years ago finally surfaced on the web, showing 3.2 million Burger King Russia victims.",
  "key_points": [
    "Burger King Russia hacked in October 2024, exposing 3.2 million customer data",
    "Mindbox marketing platform responsible for data breach, first major incident",
    "No payment info stolen, but customers warned of phishing and identity theft risks"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}