7-Eleven Breach Exposed Personal Data of 185,300 People, HIBP Says
Summary
7-Eleven disclosed unauthorized access to systems storing franchisee documents. ShinyHunters claimed responsibility and posted a data archive; Have I Been Pwned said its analysis found personal information for 185,300 people.
Key points
- 7-Eleven said an unauthorized third party accessed systems used to store franchisee documents on April 8, 2026.
- ShinyHunters claimed responsibility on April 17, but 7-Eleven has not attributed the intrusion to a specific actor.
- ShinyHunters claimed it stole more than 600,000 records and posted a 9.4GB archive after 7-Eleven reportedly refused a ransom demand.
- Have I Been Pwned said its analysis of the leaked data found information for 185,300 people, including names, dates of birth, email addresses, phone numbers, and physical addresses.
- The company did not confirm ShinyHunters’ claims or disclose the number of affected people in its reported response to BleepingComputer.
Article Details
- Victim Organization
- 7-Eleven
- Incident Type
- Data breach involving unauthorized access to systems used to store franchisee documents
- Incident Date
- 2026-04-08
- Disclosure Date
- 2026-05-01
- Data Types Exposed
- Names
- Dates of birth
- Email addresses
- Phone numbers
- Physical addresses
- Affected Records
- Have I Been Pwned reported that its analysis of the leaked data found 185,300 affected people. ShinyHunters separately claimed to have stolen over 600,000 records.
- Affected Data Size
- ShinyHunters claimed to have leaked a 9.4GB archive of documents.
- Operational Impact
- No operational impact from this incident was reported.
- Ransom Or Extortion
- ShinyHunters claimed it leaked the archive after 7-Eleven reportedly refused to pay a ransom to have the stolen data returned and destroyed.
- Claim Status
- confirmed