Burger King Japan says attackers who accessed its app member system from Oct 2 to 7 reached 11.18 million customer records, and the data has leaked online. The company warned affected customers to watch for emails, SMS messages and calls that may impersonate it.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap−10
- Incentives
- Not scored
- Confidence66
South Korea moves to discipline agency heads over unchanged passwords and ignored flaws
South Korea plans to discipline public-agency heads for basic cyber lapses after 247 public-sector breaches since 2021 led to no head being disciplined. The penalties are headed into the rules now, while the staff incentives and the security budget are still being worked out.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives50
- Confidence55
Japan's Digital Agency says an intruder used a medium-severity VPN bug that already had a patch, then worked through a maintenance account on a file platform shared by 23 ministries. Disclosure came 78 days after detection.
Perspective Coverage
3 publishers
- Builder
- Builder 23%
- Operator
- Operator 70%
- Investor
- Investor 7%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence70
Helpfeel says an attacker took about 490 million Gyazo image metadata records, including the IDs that build every capture link, and the company has disabled viewing of some images and asked every user to change their password.
Perspective Coverage
6 publishers
- Builder
- Builder 23%
- Operator
- Operator 67%
- Investor
- Investor 10%
Reality
- Evidence70
- Adoption60
- Hype gap+20
- Incentives55
- Confidence65
Washington puts Korea's public-sector cloud program on its list of trade demands
A Seoul Economic Daily column lists four Korean digital rules the U.S. has asked Seoul to change, among them the CSAP cloud certification and the requirements for moving personal and location data overseas.
Reality
- Evidence25
- Adoption
- Not scored
- Hype gap+20
- Incentives60
- Confidence35