7-Eleven data breach exposes personal information of 185,000 people

7-Eleven data breach exposes personal information of 185,000 people

7-Eleven data breach exposes personal information of 185,000 people

https://www.bleepingcomputer.com/news/security/7-eleven-data-breach-exposes-personal-information-of-185-000-people/

Publish Date: 2026-05-26 03:01:12

Source Domain: www.bleepingcomputer.com

The ShinyHunters extortion gang stole personal information from 183,000 people after hacking into 7-Eleven’s systems in April, according to data breach notification service Have I Been Pwned. The multinational convenience store chain, founded in 1927, currently operates over 86,000 stores globally and holds multiple loyalty programs for its customers. On May 1, 7-Eleven sent notification letters to affected customers confirming attackers accessed certain systems used to store franchisee documents in early April. Initially, 7-Eleven did not officially connect the incident to any specific group, but ShinyHunters later claimed responsibility and released stolen data after the company reportedly refused to pay a ransom. Have I Been Pwned analysis revealed that the stolen data included names, dates of birth, email addresses, phone numbers, and physical addresses of 185,300 people. This breach adds to ShinyHunters’ list of high-profile targets, which includes various big-name companies following a similar pattern of extortion and data leaks if ransoms aren’t paid.

Key Points:
– ShinyHunters claimed responsibility for the breach of 7-Eleven, affecting over 183,000 people.
– Stolen data included personal information such as names, physical addresses, dates of birth, phone numbers, and email addresses.
– ShinyHunters has targeted several large corporations, highlighting persistent issues in cybersecurity.
– The incident is one of many recent breaches by ShinyHunters, suggesting significant lapses in corporate information security measures.
– Law enforcement recommends against paying ransoms due to the high risk of future extortion attempts or data leaks.