[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcrL0jLe0cZ0cvEKqC9g1uLl3K38qUBoXFMzO0kg4KQ4":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"dfdaa450-4a60-44c3-80e5-f6d36c0d9f13","Burger King Japan data breach exposes 11 million customer records","burger-king-japan-data-breach-exposes-11-million-customer-records-27c670","Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. [...]","Burger King Japan has disclosed a significant data breach affecting 11.18 million customers. Attackers gained access to a server storing personal information such as names, dates of birth, gender, email addresses, phone numbers, and order history for users of the company's official smartphone app. The company has reported the incident to Japan's Personal Information Protection Commission and is investigating with external experts, warning customers to be vigilant against phishing attempts.","Burger King Japan data breach exposes 11.18 million customer records.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fburger-king-japan-data-breach-exposes-11-million-customer-records\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F16\u002FBurger-King-Japan.jpg","2026-10-16T12:01:29+00:00","2026-10-16T14:00:10.795167+00:00",8,[17,20],{"name":18,"type":19},"smartphone app","product",{"name":21,"type":22},"Burger King","vendor","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36,41],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":49,"vendors":131},[50,79,105],{"slug":51,"name":52,"problem":53,"products":54},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":80,"name":81,"problem":82,"products":83},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[84,89,97],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":85,"product_name":86,"url":87,"description":88},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"slug":106,"name":107,"problem":108,"products":109},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":127,"product_name":128,"url":129,"description":130},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",[],{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":150},"burger-king-japan-breach-exposes-11m-app-users-personal-data","Burger King Japan Breach Exposes 11M App Users' Personal Data","Attackers compromised a server storing personal data for 11.18 million Burger King Japan app users, exposing names, dates of birth, email addresses, phone numbers, and order history. The breach highlights the risks of centralizing large volumes of customer PII in application back-end servers without sufficient access controls or segmentation. This type of exposure can fuel downstream phishing, identity theft, and credential stuffing attacks against affected customers. Under Japan's Act on Protection of Personal Information (APPI), organizations are obligated to protect customer data and notify regulators promptly — underscoring that compliance obligations must be matched by robust technical safeguards.",[137,138,139,140,141,142,143,144,145,146,147,148,149],"CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 SC-28 – Protection of Information at Rest","NIST SP 800-53 SI-4 – System Monitoring","NIST Privacy Framework PR.DS-1 – Data-at-rest protection","Japan APPI (Act on Protection of Personal Information) Article 22 – Security Management Measures","Japan APPI Article 26 – Notification of Personal Information Leakage","GDPR Article 25 – Data Protection by Design and by Default (analogous best practice)","GDPR Article 32 – Security of Processing","OWASP Top 10 A02:2021 – Cryptographic Failures","ISO\u002FIEC 27001 Annex A.8.2 – Information Classification",{}]