A cyberattack on Mindbox, Burger King Russia’s marketing platform, exposed personal information linked to about 3.2 million customers. The breach matters because the data was made publicly available and covered several years of customer activity, although Burger King said financial and passport details were not involved.

Have I Been Pwned confirmed the exposed information included names, dates of birth, email addresses, phone numbers, genders and approximate locations. The data dated back to May 2018, while contemporary reports suggested the leak contained more than 5.6 million records and possibly order histories; other companies, including retailer Detsky Mir, were reportedly affected.