7-Eleven
Disclosed May 1, 20264 months ago3,001 affectedConfirmed
7-Eleven confirms ShinyHunters breach of franchise data, 185,300 affected
7-Eleven confirmed attackers accessed its Salesforce environment and systems holding franchisee documents in April 2026. ShinyHunters leaked 9.4 GB after ransom was refused, and Have I Been Pwned counted 185,300 affected people.
What is known
| People affected | 3,001 (as reported by the organization) |
|---|---|
| Disclosed | May 1, 2026 |
| Discovered | Apr 8, 2026 |
| Happened | Apr 8, 2026 |
| Attack | Extortion |
| Data exposed | Dates of birth, Emails, Names, Phone numbers, Addresses, Social Security numbers |
| Sector | Retail · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: 7-Elevenhaveibeenpwned.com · Aggregator | Aggregator |
| 7-Eleven data breach affects over 185,000 people's personal datatechcrunch.com · News | News |
| 7-Eleven confirms data breach claimed by the ShinyHunters gangbleepingcomputer.com · News | News |
| Vermont Attorney General breach report: 7-Elevenago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: 7 Elevenin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | May 1 | 6 |
| Vermont AGresidents of VT | May 16 | 1 |
| Researchtotal | May 19 | |
| Have I Been Pwnedaccounts in the data | May 24 | 185,256 |
Other breaches at 7-Eleven
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Aug 9, 2016Aug 9, 201610 years ago | Aug 9, 201610 years ago | Not stated | Tech | Confirmed | 7,832 |
History of this record
- 2026-09-25 · records_basis: hibp to organization · backfill source
- 2026-09-25 · records: 185256 to 3001 · backfill source
- 2026-09-25 · disclosed: 2026-05-16 to 2026-05-01 · backfill source
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://www.bleepingcomputer.com/news/security/7-eleven-confirms-data-breach-claimed-by-the-shinyhunters-gang/ to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · status: disclosed to confirmed · backfill source
- 2026-09-25 · verified_by: empty to vt-ag · backfill source
- 2026-09-25 · verified: 0 to 1 · backfill source
- 2026-09-25 · data_types: ["dob","emails","names","phone","addresses"] to ["dob","emails","names","phone","addresses","ssn"] · backfill source
- 2026-09-25 · disclosed: 2026-05-19 to 2026-05-16 · backfill source
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/7-Eleven to https://www.bleepingcomputer.com/news/security/7-eleven-confirms-data-breach-claimed-by-the-shinyhunters-gang/ · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · sector: tech to retail · seed source
- 2026-09-25 · disclosed: 2026-05-24 to 2026-05-19 · seed source
- 2026-09-25 · discovered: empty to 2026-04-08 · seed source
- 2026-09-25 · summary: In April 2026, 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters , with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth to 7-Eleven confirmed attackers accessed its Salesforce environment and systems holding franchisee documents in April 2026. ShinyHunters leaked 9.4 GB after ransom was refused, and Have I Been Pwned counted 185,300 affected people. · seed source
- 2026-09-25 · title: empty to 7-Eleven confirms ShinyHunters breach of franchise data, 185,300 affected · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Vermont AG. Record counts are as reported. Not legal advice.