Pizza Hut Japan: attackers accessed the online-ordering payment API, up to about 4.48M records exposed

Teaser from the source

On Oct 19 2026 a third party gained unauthorized access to Pizza Hut Japan's online-ordering payment API and took customer data. The company confirmed customer IDs, email addresses, phone numbers, transaction records, deleted-customer records and session login tokens leaked; credit card data was not. Japanese media put the total at up to about 4.48 million records. Pizza Hut blocked the source, fixed the vulnerability and reported to Japan's Personal Information Protection Commission; the investigation continues.

This is the RSS-feed teaser. Read the full article at the original source.