7-Eleven data breach exposes personal information of 185,000 people

The ShinyHunters extortion gang claimed responsibility for a cyberattack on 7-Eleven in April 2026, leaking personal data from 185,300 individuals. The breach exposed names, dates of birth, email addresses, phone numbers, and physical addresses after the hackers accessed 7-Eleven’s Salesforce environment. Have I Been Pwned confirmed the leak affected 185,300 unique email addresses, with some records including additional exposed data fields. 7-Eleven acknowledged unauthorized access to certain systems on April 8, 2026, but did not attribute the attack to a specific group. The company refused to pay a ransom, prompting ShinyHunters to release a 9.4GB archive of stolen documents on their dark web site. The breach targeted franchisee documents, aligning with 7-Eleven’s later statement about the incident’s scope. This is not the first cybersecurity incident for 7-Eleven; the company’s Danish branch suffered a ransomware attack in August 2022, forcing 175 store closures. ShinyHunters has previously targeted Salesforce customers, claiming to have stolen billions of records across multiple high-profile breaches, including the European Commission, Vimeo, Zara, and Mango. The gang has been active for over a year, exploiting vulnerabilities in Salesforce’s Aura framework and other platforms. Their recent campaigns, including the Salesloft and Drift hacks, have exposed vast amounts of corporate and personal data. 7-Eleven’s refusal to negotiate with ShinyHunters resulted in the public disclosure of the breach, raising concerns about data security in global retail systems.