7-Eleven Breach Likely Affected 185,000, Have I Been Pwned Says
Summary
7-Eleven disclosed an April 8 breach involving systems with franchise documents. Have I Been Pwned analyzed a dataset published online and estimated that about 185,300 people were affected.
Key points
- 7-Eleven said the April 8 incident involved systems containing franchise documents and that names and addresses were likely stolen.
- Have I Been Pwned analyzed the published dataset and estimated that roughly 185,300 people were affected.
- The dataset reportedly included names, addresses, email addresses and dates of birth; a small subset had additional data fields.
- ShinyHunters claimed it stole 600,000 Salesforce records and demanded a ransom; the group later offered the data for sale on a Russian hacking forum.
- Have I Been Pwned said the dataset’s information was consistent with 7-Eleven’s breach notice.
Article Details
- Victim Organization
- 7-Eleven
- Incident Type
- Data breach involving systems containing franchise documents; personal information was likely stolen.
- Data Types Exposed
- Names
- Addresses
- Email addresses
- Dates of birth
- Affected Records
- Roughly 185,300 individuals, according to HaveIBeenPwned; this is an estimate.
- Operational Impact
- The incident involved systems containing franchise documents. No operational disruption was reported.
- Ransom Or Extortion
- ShinyHunters listed 7-Eleven on its leak website, claimed to have stolen 600,000 Salesforce records, and demanded ransom by April 21. The group later offered the data for sale on a Russian hacking forum. The theft claim and ransom demand are attributed to the group.
- Claim Status
- confirmed