LmCast :: Stay tuned in

7-Eleven data breach exposes personal information of 185,000 people

Recorded: May 26, 2026, 1:16 p.m.

Original Summarized

7-Eleven data breach exposes personal information of 185,000 people

News

Featured
Latest

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

Laravel Lang packages hijacked to deploy credential-stealing malware

Netherlands seizes 800 servers of hosting firm enabling cyberattacks

Ubiquiti patches three max severity UniFi OS vulnerabilities

Microsoft Defender can now automatically isolate hacked endpoints

Webinar: Too many tools are slowing network incident response

This lifetime PDF editor is just $65 with code SAVE5 through 5/31

CISA orders feds to patch actively exploited Drupal vulnerability

Tutorials

Latest
Popular

How to access the Dark Web using the Tor Browser

How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11

How to use the Windows Registry Editor

How to backup and restore the Windows Registry

How to start Windows in Safe Mode

How to remove a Trojan, Virus, Worm, or other Malware

How to show hidden files in Windows 7

How to see hidden files in Windows

Webinars
Downloads

Latest
Most Downloaded

Qualys BrowserCheck

STOPDecrypter

AuroraDecrypter

FilesLockerDecrypter

AdwCleaner

ComboFix

RKill

Junkware Removal Tool

Deals

Categories

eLearning

IT Certification Courses

Gear + Gadgets

Security

VPNs

Popular

Best VPNs

How to change IP address

Access the dark web safely

Best VPN for YouTube

Forums
More

Virus Removal Guides
Startup Database
Uninstall Database
Glossary
Send us a Tip!
Welcome Guide

HomeNewsSecurity7-Eleven data breach exposes personal information of 185,000 people

7-Eleven data breach exposes personal information of 185,000 people

By Sergiu Gatlan

May 26, 2026
03:01 AM
0

The ShinyHunters extortion gang stole the personal information of over 183,000 people after hacking the systems of convenience store chain giant 7-Eleven in April, according to data breach notification service Have I Been Pwned.
Founded in 1927, 7-Eleven now operates, franchises, and licenses more than 86,000 stores worldwide, including 13,000 stores in the U.S. and Canada. 7-Eleven also operates and franchises Speedway, Stripes, Laredo Taco Company, and Raise the Roost Chicken and Biscuits locations, and its 7Rewards and Speedy Rewards loyalty programs also have over 100 million members.
The company revealed in data breach notification letters sent to affected customers on May 1 that attackers stole the data of an undisclosed number of individuals after gaining access to some 7-Eleven systems in early April.
"We recently discovered that on April 8, 2026, an unauthorized third party gained access to certain 7-Eleven systems used to store franchisee documents," 7-Eleven said.
While 7-Eleven has not attributed the attack to a specific hacking group or threat actor and has not shared further details on the incident, the ShinyHunters extortion gang claimed responsibility for the attack on April 17.
The cybercriminals claimed to have stolen over 600,000 records containing corporate data and personally identifiable information after breaching 7-Eleven's Salesforce environment. They then leaked a 9.4GB archive of documents on their dark web leak site after the company refused to pay a ransom to have the stolen data returned and destroyed.

7-Eleven entry on ShinyHunters' leak site (BleepingComputer)
Although a 7-Eleven spokesperson didn't reply when BleepingComputer reached out to confirm ShinyHunters' claims and share the number of affected individuals, Have I Been Pwned analyzed the data leaked by the cybercrime group and said the breach exposed the data of 185,300 people, including names, dates of birth, unique email addresses, phone numbers, and physical addresses.
"The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth and phone numbers. A small number of records also contained additional exposed data fields," it said. "The company later advised the breach was limited to 'certain 7-Eleven systems used to store franchisee documents,' a statement consistent with the exposed data."
7-Eleven Denmark also confirmed it was the victim of a ransomware attack in August 2022, after the attackers encrypted some of its systems and forced the chain to shut down 175 stores.
ShinyHunters has been targeting Salesforce customers for the past year and breached hundreds of companies, claiming they've stolen billions of records in the Salesforce Aura data theft attacks and the Salesloft Drift campaign.
Other breaches recently claimed by ShinyHunters include the European Commission, video service Vimeo, Spanish fast-fashion retailers Zara and MANGO, edtech giant McGraw-Hill, home security giant ADT, medical device maker Medtronic, PornHub, Rockstar Games, online dating giant Match Group, as well as tech giants Cisco and Google.
Two weeks ago, the FBI advised ShinyHunters' victims not to give in to the threat actors' demands, after previously warning that paying ransoms does not guarantee that threat actors won't attempt to sell the stolen data to other cybercriminals or extort the victims again.

The Validation Gap: Automated Pentesting Answers One Question. You Need Six.

Automated pentesting tools deliver real value, but they were built to answer one question: can an attacker move through the network? They were not built to test whether your controls block threats, your detection rules fire, or your cloud configs hold.This guide covers the 6 surfaces you actually need to validate.
Download Now

Related Articles:
7-Eleven confirms data breach claimed by the ShinyHunters gangHome security giant ADT data breach affects 5.5 million peopleData breach at edtech giant McGraw Hill affects 13.5 million accountsCERT-EU: European Commission hack exposes data of 30 EU entitiesInstructure reaches 'agreement' with ShinyHunters to stop data leak

7-Eleven
Breach
Data Breach
Hack
Have I Been Pwned
Salesforce
ShinyHunters

Sergiu Gatlan
Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over a decade. Email or Twitter DMs for tips.

Previous Article
Next Article

Post a Comment Community Rules

You need to login in order to post a comment

Not a member yet? Register Now

You may also like:

  Upcoming Webinar

Popular Stories

Laravel Lang packages hijacked to deploy credential-stealing malware

Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

Sponsor Posts

Overdue a password health-check? Audit your Active Directory for free

Patch management isn't enough. See why privilege is defining security risk today.

33% Rise in Healthcare Credential Theft in 2025: What you need to know

Protect Your Business from Ecommerce Fraud

  Upcoming Webinar

Follow us:

Main Sections

News
Webinars
VPN Buyer Guides
SysAdmin Software Guides
Downloads
Virus Removal Guides
Tutorials
Startup Database
Uninstall Database
Glossary

Community

Forums
Forum Rules
Chat

Useful Resources

Welcome Guide
Sitemap

Company

About BleepingComputer
Contact Us
Send us a Tip!
Advertising
Write for BleepingComputer
Social & Feeds
Changelog

Terms of Use - Privacy Policy - Ethics Statement - Affiliate Disclosure

Copyright @ 2003 - 2026 Bleeping Computer® LLC - All Rights Reserved

Login

Username

Password

Remember Me

Sign in anonymously

Sign in with Twitter

Not a member yet? Register Now


Reporter

Help us understand the problem. What is going on with this comment?

Spam

Abusive or Harmful

Inappropriate content

Strong language

Other

Read our posting guidelinese to learn what content is prohibited.

Submitting...
SUBMIT

The ShinyHunters extortion gang was responsible for stealing personal information from the convenience store chain giant 7-Eleven, resulting in a data breach that exposed the details of over 183,000 individuals. This incident occurred after the cybercriminals gained unauthorized access to certain 7-Eleven systems used for storing franchisee documents in early April 2026. While 7-Eleven did not attribute the attack to a specific group, the extortion gang claimed responsibility for the breach on April 17, asserting that they had stolen over 600,000 records containing both corporate data and personally identifiable information after compromising the company's Salesforce environment.

Analysis of the leaked data, conducted by Have I Been Pwned, indicated that the breach exposed data belonging to approximately 185,300 people. This exposed information included names, dates of birth, unique email addresses, phone numbers, and physical addresses, with some records also containing additional exposed data fields. 7-Eleven noted that the attack was limited to the specific systems holding franchisee documents, which aligns with the scope of the exposed data. Furthermore, 7-Eleven Denmark had previously experienced a separate ransomware attack in August 2022, which led to the encryption of some systems and the forced shutdown of 175 stores.

The ShinyHunters group has demonstrated a broad targeting strategy, focusing on Salesforce customers and having breached numerous high-profile organizations, including the European Commission, Vimeo, Spanish fast-fashion retailers Zara and MANGO, McGraw-Hill, ADT, Medtronic, PornHub, Rockstar Games, Match Group, Cisco, and Google. The reporting on this event was provided by Sergiu Gatlan. In response to the threat actors' demands, the Federal Bureau of Investigation advised the victims to resist these demands, warning that paying ransoms does not guarantee that the stolen data will be destroyed and that it may encourage future extortion attempts by the threat actors or potential resale to other cybercriminals. This case highlights the ongoing risks associated with data security, particularly when systems holding sensitive private and corporate records are compromised.