Millions of Russian fast food fans hit in Burger King Russia hack

Date:
Wed, 23 Sep 2026 15:10:00 +0000

Description:
Data stolen years ago finally surfaced on the web, showing 3.2 million Burger King Russia victims.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Burger King Russias 2024 breach via Mindbox exposed 3.2 million customer records, now leaked online Data includes emails, names, genders, birth dates, phone numbers, and geolocations (20182024) Payment details werent compromised; users warned of phishing and identity theft risks Back in 2024, the Russian arm of Burger King suffered a data breach at the hands of unknown threat actors - now, that data has
finally been leaked online.

In October 2024, Burger King told TASS, Russias national news agency, that unidentified hackers attacked Mindbox, a domestic marketing automation platform the company had been using. Through Mindbox, the crooks managed to obtain sensitive company data, including information belonging to the customers. Latest Videos From TechRadar Watch full video here:

As a customer data and marketing automation platform, Mindbox helps
businesses gather and use customer information for personalized, omnichannel marketing campaigns. Its tools cover email and SMS campaigns, push notifications, loyalty programs, chatbots, and more. According to the
company, more than 1,100 businesses use its platform, including LOral, Panasonic , KFC, JBL and United Colors of Benetton. One victim in a supply-chain attack At the time, there was no word on the nature of the information that was taken, apart from the fact that payment information was not compromised. You may like Millions of stolen records allegedly dumped online by mystery "Hatman" hacker McDonalds, Vodafone and more see Microsoft Azure records stolen Lidl customers across Europe hit in suspected data
breach - here's what we know Chick-fil-A reveals data breach customers
warned hackers may have accessed their account info

"Among the victims of the attack may also be the data of customers of the Burger King restaurant chain," the company said at the time.

Burger King confirms that among the personal data, the accuracy of which is being clarified, there is no information about payment details: open information about transactions is not transmitted or stored by third parties. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

The details about the hack were also not disclosed. We dont know if the platform contained a zero-day, or if a company employee had their login credentials or session tokens exposed. Third-party supply chain attacks such as this one are common and often rather disruptive, affecting numerous companies using the same tools. For Mindbox, however, there have been no reports of additional victims.

In its 2024 results announcement, Mindbox said the attack was its first serious information security incident, which was quickly detected and contained thanks to threat detection tools.

In the aftermath of the breach, Mindbox said it found and eliminated points where employees without access rights to sensitive data could indirectly obtain them, hinting that the attack was, in fact, an identity-based attack rather than a zero-day exploit. What to read next Massive data breach sees
220 million traveler records exposed nine years of airline info leaked including passenger and passport details Carhartt data breach exposed information from 12.9 million user accounts US healthcare software giant Unlimited Technology Systems admits hackers may have stolen sensitive data of 3.8 million people

The company also changed development processes to find such points before
they get into the product, and reformed Mindbox's internal role system to
make permissions stricter and more granular. It also limited project access scenarios, introduced a mechanism for confirming access by another employee, and introduced mandatory two-factor authentication, among other things. Have you been pwned? Today, more details were released on Have I Been Pwned?, a website that aggregates information stolen in various hacks and helps people learn if their email addresses and other information had been compromised in the past. According to the newest entry, more than three million people have had their data exposed in this incident:

The breach exposed 3.2M unique email addresses along with names, genders, dates of birth, phone numbers and approximate geolocations, with the data spanning 2018 to August 2024, Have I Been Pwned? writes. Burger King Russia acknowledged the incident and advised it did not include payment or passport details.

The latest findings seem to be somewhat in line with what the media reported at the time. According to The Register , initial reports claimed around 5.6 million lines of data as exposed, which included information about a
customers favorite dish and previous order dates. While this information was not mentioned in the newest report, if every data line includes one email,
one name, or one phone number, it could amount to around 5.6 million.

While the information might be a few years old, things like names and birth dates, and genders rarely change, but are vital in identity theft , social engineering, and similar attacks. Burger King users, especially those in Russia, should be wary of incoming email messages, particularly those
claiming to come from the fast food chain. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/millions-of-russian-fast-food-fans-hit- in-burger-king-russia-hack


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)