The Register reports that a data breach at Burger King Russia has exposed roughly 3.2 million customer records. The stolen data was held in a marketing database that had been accumulating information for six years before attackers accessed it.
Have I Been Pwned (HIBP) confirmed the incident, adding the compromised records to its breach notification service. This lets affected users check whether their details were part of the leak.
The breach appears to have been carried out by cybercriminals who gained entry to the marketing reservoir. Because the data had been stored for years, the exposure may affect a wide range of customers who interacted with the brand over that period.