Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.

Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records.

Development platform Zeabur has disclosed details of a cybersecurity incident in which an attacker used leaked internal credentials stored in plaintext to compromise its infrastructure and steal over 3.2 million environment variable records and information for 321,810 accounts.

The open-source AI coding project OpenCode has notified some users that stored API keys they used with external providers were exposed in a security breach.

Staffing software company Bullhorn has disabled access to its platform to contain a cyberattack that caused a system-wide outage.

The Legal Aid Agency (LAA), an executive agency of the UK’s Ministry of Justice that manages the country’s Public Defender Service, says attackers who breached its IT systems in April 2025 stole records dating back to 1978.

TUI Belgium has confirmed a data breach after customers reported receiving fraudulent messages containing accurate details of their holiday bookings. An international team is investigating the incident, whose cause and scale remain unclear.

Cybersecurity firm Trellix disclosed a data breach after attackers gained access to “a portion” of its source code repository.