Back to the blog
daily briefOctober 16, 2026 3 min read

Security Brief — October 16, 2026

Major data breaches in Japan involving Burger King and SourceNext have exposed over 33 million user records, highlighting systemic vulnerabilities in membership APIs.

By SecureIDsafe Threat Team · SecureIDsafe Threat Research#daily-brief

Breaches

  • Burger King Japan Breach — Approximately 11.18 million app member records, including names and contact details, were exposed between October 2 and October 7.
  • SourceNext Breach — Up to 22.5 million member records were leaked after attackers exploited a member-data API.
  • Monogatari (Yakiniku King) Breach — Restaurant chain disclosed a leak of 10.78 million member records via its app's management system.
  • Bookoff Group Holdings Breach — Secondhand-goods retail chain disclosed up to 6.43 million member records potentially leaked via a subsidiary's membership system.

AI Attacks

  • AI-Driven Extortion — Emerging reports indicate increased use of AI in sophisticated extortion campaigns targeting corporate entities.

Dark Web

  • Ransomware Surge — Threat intelligence reports a 52.3% increase in extortion volume, with syndicates like The_Gentlemen and Qilin leading the activity.
daily briefbreachesai attacksdark web

Build your Fortress of Sovereignty.

Single users, business teams and enterprise perimeters — the same non-bypassable security, scaled to your vault.