# The burger app had no card

2026-10-15

BK Japan says about 11.18 million Burger King official-app members may have left. The field list is name, phone, date of birth, and email. Cards are not held. Passwords are not in the confirmed set.

Canonical: https://www.fabiocti.com/notes/the-burger-app-had-no-card/
Author: Fabio Correia

Eleven million names. The till was never in the app.

BK Japan said the official Burger King app was reached between 2 and 7 October. It confirmed a leak on the 13th and cut the source the same day. About 11.18 million member rows. The fields it lists: name in kanji and kana, phone, date of birth, gender, prefecture, email, member ID, how the account was registered, whether a mobile order exists, whether the email was verified. It does not hold card numbers. It has not confirmed a password leak, or misuse. Members are being mailed. The Personal Information Protection Commission has been told.

A prefecture next to a phone is enough for a text that already knows last week’s order. It is not a card file. It is not a finding that the restaurant POS was reached. Demae-can and the counter are a different system until someone names them.

## What “no password” will be asked to cover

It will be briefed as safe because the login string is missing. The phone and the date of birth are the login for the next call. It will be briefed as the global brand. This notice is the Japan app. Do not paste a US incident onto this row count.

If you only ever paid at the counter and never opened the app, you are not in this list. If you typed a birthday into the app, that birthday is. They say they will not ask for a password by mail or phone. A reset that arrives first is not theirs.

Eleven million is a member table. The card is still in the wallet. Keep those sentences apart.