ShinyHunters Claim 7-Eleven Salesforce Data Breach

Summary
ShinyHunters claim over 600,000 7-Eleven Salesforce records containing PII and internal data were compromised, and issued a pay-or-leak deadline of Apr. 21, 2026. The claim is unconfirmed.
Key points
- ShinyHunters claim 7-Eleven, Inc. was the victim.
- The group alleges that over 600,000 Salesforce records containing PII and internal corporate data were compromised.
- The claim includes a pay-or-leak demand, with contact requested by Apr. 21, 2026, and a threat of additional disruptive digital actions.
- The post was monitored by ransomware[.]live and states that the claims could not be confirmed.
Article Details
- Victim
- 7-Eleven, Inc.
- Victim Domain
- 7-eleven.com
- Claim Date
- 2026-04-18
- Encryption Status
- Unknown
- Exfiltration Status
- Unverified; ShinyHunters claims records were compromised, but the source does not confirm exfiltration.
- Exfiltrated Data
- ShinyHunters claims the records contain PII and internal corporate data.
- Ransom Demand
- ShinyHunters issued a 'Pay or Leak' demand and requested contact by 2026-04-21; no amount is stated.
- Leak Status
- Threatened; ShinyHunters warned it would leak data if contact/payment was not made. No completed leak is reported.
