Burger King Russia customers hit by 3.2 million record data breach

Personal data belonging to approximately 3.2 million Burger King customers in Russia has been leaked online following a cyberattack on Mindbox, a marketing automation platform used by the restaurant chain.

The breach, which originated from an attack on Mindbox in August 2024, exposed customer information spanning six years, from May 2018 to 2024. The leaked data includes names, email addresses, phone numbers, dates of birth, genders, and approximate geographic locations.

Burger King previously confirmed to the news agency TASS that while customer data was affected, sensitive financial information and passport details were not compromised, as the company does not store such information through the Mindbox platform. Cybersecurity researchers at Have I Been Pwned have confirmed the leak, warning users of potential risks regarding phishing and identity theft.