7-Eleven

Disclosed May 1, 20263,001 affectedConfirmed

7-Eleven confirms ShinyHunters breach of franchise data, 185,300 affected

7-Eleven confirmed attackers accessed its Salesforce environment and systems holding franchisee documents in April 2026. ShinyHunters leaked 9.4 GB after ransom was refused, and Have I Been Pwned counted 185,300 affected people.

What is known

People affected	3,001 (as reported by the organization)
Disclosed	May 1, 2026
Discovered	Apr 8, 2026
Happened	Apr 8, 2026
Attack	Extortion
Data exposed	Dates of birthEmailsNamesPhone numbersAddressesSocial Security numbers
Sector	Retail · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: 7-Eleven

Newstechcrunch.com

7-Eleven data breach affects over 185,000 people's personal data

Newsbleepingcomputer.com

7-Eleven confirms data breach claimed by the ShinyHunters gang

Official noticeago.vermont.gov

Vermont Attorney General breach report: 7-Eleven

Official noticein.gov

Indiana Attorney General 2026 data breach report: 7 Eleven

Notices filed

Residents of INMay 1

Indiana AG6 people

Residents of VTMay 16

Vermont AG1 person

TotalMay 19

ResearchCount not stated

Accounts in the dataMay 24

Have I Been Pwned185,256 people

Other breaches at 7-Eleven

Breach, details not statedExposed names and Social Security numbers. Reported to the California AG.7,832 affectedTechUSAug 9, 2016

History of this record

records_basis2026-09-25

hibp to organizationby backfillSource

records2026-09-25

185256 to 3001by backfillSource

disclosed2026-09-25

2026-05-16 to 2026-05-01by backfillSource

source_type2026-09-25

press to officialby backfillSource

source_url2026-09-25

https://www.bleepingcomputer.com/news/security/7-eleven-confirms-data-breach-claimed-by-the-shinyhunters-gang/ to https://ago.vermont.gov/categories/security-breach-noticesby backfillSource

status2026-09-25

disclosed to confirmedby backfillSource

verified_by2026-09-25

empty to vt-agby backfillSource

verified2026-09-25

0 to 1by backfillSource

data_types2026-09-25

["dob","emails","names","phone","addresses"] to ["dob","emails","names","phone","addresses","ssn"]by backfillSource

disclosed2026-09-25

2026-05-19 to 2026-05-16by backfillSource

source_type2026-09-25

aggregator to pressby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/7-Eleven to https://www.bleepingcomputer.com/news/security/7-eleven-confirms-data-breach-claimed-by-the-shinyhunters-gang/by seedSource

country2026-09-25

empty to USby seedSource

sector2026-09-25

tech to retailby seedSource

disclosed2026-09-25

2026-05-24 to 2026-05-19by seedSource

discovered2026-09-25

empty to 2026-04-08by seedSource

summary2026-09-25

In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters , with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth to 7-Eleven confirmed attackers accessed its Salesforce environment and systems holding franchisee documents in April 2026. ShinyHunters leaked 9.4 GB after ransom was refused, and Have I Been Pwned counted 185,300 affected people.by seedSource

title2026-09-25

empty to 7-Eleven confirms ShinyHunters breach of franchise data, 185,300 affectedby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about 7-Eleven