7-Eleven Confirms April Breach; ShinyHunters Claims 600,000 Records Stolen

Summary

7-Eleven confirmed unauthorized access to systems storing franchisee documents and exposure of personal information. ShinyHunters claimed it stole over 600,000 records and later leaked a 9.4GB archive.

Key points

7-Eleven said an unauthorized third party accessed certain systems used to store franchisee documents on April 8, 2026.
The company said personal information was exposed but did not disclose how many people were affected or which data categories were involved.
7-Eleven said it launched an investigation after discovering the incident in early April.
ShinyHunters claimed responsibility on April 17 and alleged it stole more than 600,000 records from 7-Eleven’s Salesforce environment.
ShinyHunters later said it leaked a 9.4GB archive after ransom negotiations failed; the article does not independently verify the group’s theft and leak claims.

Article Details

Victim Organization: 7-Eleven
Incident Type: Unauthorized access to company systems and exposure of personal information; ShinyHunters claimed data theft and extortion.
Incident Date: 2026-04-08
Disclosure Date: 2026-05-01
Data Types Exposed: Personal information (specific categories not disclosed)
Corporate data and personally identifiable information (claimed stolen by ShinyHunters)
Affected Records: Unknown; ShinyHunters claimed it stole more than 600,000 records, while 7-Eleven did not disclose the number of affected individuals.
Affected Data Size: ShinyHunters reportedly leaked a 9.4 GB archive of documents; the contents and size of confirmed exposed data were not specified by 7-Eleven.
Operational Impact: Attackers accessed systems used to store franchisee documents. No operational disruption was reported.
Ransom Or Extortion: ShinyHunters claimed ransom negotiations failed and said it leaked the archive after 7-Eleven did not reach an agreement. The ransom demand and payment status were not independently confirmed by 7-Eleven.
Claim Status: confirmed

Threat Actors

ShinyHuntersThe extortion group claimed responsibility for the breach, said it stole more than 600,000 records from 7-Eleven’s Salesforce environment, and reportedly leaked a 9.4 GB archive after ransom negotiations failed. These data-theft and extortion details are group claims.

Products

SalesforceThe ShinyHunters extortion group claimed the attack, said it stole more than 600,000 records from 7-Eleven’s Salesforce environment, and later leaked a 9.4GB archive after ransom talks failed.

Industries

RetailIn addition to 7-Eleven stores, the retail giant also operates and franchises Speedway, Stripes, Laredo Taco Company, and Raise the Roost Chicken and Biscuits locations worldwide.