Pizza Hut Japan: attackers accessed the online-ordering payment API, up to about 4.48M records exposed ยท updates https://pwn.watch/i/pizza-hut-japan-payment-api-breach-oct-2026 On Oct 19 2026 a third party gained unauthorized access to Pizza Hut Japan's online-ordering payment API and took customer data. The company confirmed customer IDs, email addresses, phone numbers, transaction records, deleted-customer records and session login tokens leaked; credit card data was not. Japanese media put the total at up to about 4.48 million records. Pizza Hut blocked the source, fixed the vulnerability and reported to Japan's Personal Information Protection Commission; the investigation continues. en Fri, 23 Oct 2026 00:00:00 GMT Pizza Hut Japan: attackers accessed the online-ordering payment API, up to about 4.48M records exposed: Pizza Hut Japan discloses the breach: customer IDs, emails, phone numbers, transaction records, deleted-customer records and session login tokens leaked; card data not affected. Reports put it at up to ~4.48M records. https://pwn.watch/i/pizza-hut-japan-payment-api-breach-oct-2026 https://pwn.watch/i/pizza-hut-japan-payment-api-breach-oct-2026#2026-10-23-ac80c9cb Fri, 23 Oct 2026 00:00:00 GMT high <p><a href="https://corp.pizzahut.jp/info/5540">Source</a></p> Pizza Hut Japan: attackers accessed the online-ordering payment API, up to about 4.48M records exposed: An attacker accesses Pizza Hut Japan's online-ordering payment API and obtains customer data. https://pwn.watch/i/pizza-hut-japan-payment-api-breach-oct-2026 https://pwn.watch/i/pizza-hut-japan-payment-api-breach-oct-2026#2026-10-19-815fb776 Mon, 19 Oct 2026 00:00:00 GMT high <p><a href="https://corp.pizzahut.jp/info/5540">Source</a></p>