AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
7-Eleven Data Breach
Coverage from All About Cookies, Techtimes, and others
In April 2026, an unauthorized party accessed 7-Eleven systems used to store franchisee and franchise-applicant documents.
Reports estimated that personal information associated with about 185,000 people—including email addresses, names, physical addresses, dates of birth, and phone numbers—was exposed; some state filings described additional sensitive information. ShinyHunters claimed responsibility and reportedly published data after an extortion attempt, though its claims about the amount taken differ from reported exposure estimates. The incident’s aftermath includes 7-Eleven’s investigation and notifications, offers of identity-theft protection, and connected legal proceedings.
Looking Back
31 Day Timeline
May 18
May 23
May 28
Jun 2
Jun 7
Jun 12
Jun 17
All Articles17 articles
Important
ShinyHunters published stolen 7-Eleven franchise applicant records on May 24 after a breach discovered April 8 exposed SSNs and driver license details for more than 185,000 people.
5/30/2026 • Data Breaches & Exposure Events • General
On April 8, 2026, 7-Eleven reported a franchise application systems breach that exposed Social Security and driver's license data for some franchisees, with notifications sent May 1 and regulator filings in Maine, Vermont, and Massachusetts mid-May.
5/24/2026 • Data Breaches & Exposure Events • General
7-Eleven confirmed a May 2026 ShinyHunters breach that exposed over 600,000 Salesforce records containing franchisee PII, with notices going to Maine and Massachusetts.
5/21/2026 • Data Breaches & Exposure Events • General
A proposed class action filed after an April 2026 cyberattack alleges 7-Eleven failed to encrypt or redact PII stolen by ShinyHunters.
6/17/2026 • Data Breaches & Exposure Events • General
ShinyHunters claimed a hack-and-extortion attack on 7-Eleven in April, and Have I Been Pwned flagged 185,000+ affected people with sensitive identity data.
5/26/2026 • Data Breaches & Exposure Events • General
Interesting
7-Eleven disclosed a spring intrusion discovered April 8, and Massachusetts, Maine, and Vermont filings reported exposure of franchisee names, addresses, and some SSNs and driver’s license data.
5/20/2026 • Data Breaches & Exposure Events • General
7-Eleven disclosed an April 8 data breach in Maine involving unauthorized access to franchise application systems, with ShinyHunters claiming responsibility.
5/19/2026 • Data Breaches & Exposure Events • General
7-Eleven disclosed an April 2026 Salesforce-linked data breach after ShinyHunters claimed responsibility and leaked PII affecting about 185,300 people.
5/26/2026 • Data Breaches & Exposure Events • General
7-Eleven notified Maine, Vermont, and Massachusetts regulators in connection with an April 8 intrusion that exposed franchisee documents containing Social Security numbers.
5/20/2026 • Data Breaches & Exposure Events • General
ShinyHunters published April 2026 leaked data from a 7-Eleven extortion campaign affecting 185k unique email addresses and other personal fields.
5/24/2026 • Cybersecurity (Privacy-Relevant) • General
ShinyHunters published leaked personal data from 7-Eleven in April 2026, exposing 185,000 unique email addresses and additional identifiers tied to franchisee documents.
5/24/2026 • Data Breaches & Exposure Events • General
7-Eleven reported an April 8 data breach affecting 50 franchisees in Massachusetts, Vermont, and Maine through unauthorized access to franchisee document systems.
5/20/2026 • Data Breaches & Exposure Events • General
ShinyHunters claimed stolen Salesforce records from 7-Eleven, and 7-Eleven confirmed unauthorized access to franchisee document systems on April 8, 2026.
5/18/2026 • Data Breaches & Exposure Events • General
Carl Ellison and Rebecca Choplin filed two Northern District of Texas class actions in 2026 over 7-Eleven alleged April 2026 exposure of unencrypted PII tied to ShinyHunters extortion.
6/17/2026 • Data Breaches & Exposure Events • General
7-Eleven disclosed a 2026 cyberattack discovered April 8 that exposed about 185,000 franchise applicant records, after ShinyHunters claimed responsibility.
5/26/2026 • Data Breaches & Exposure Events • General
ShinyHunters claimed a 7-Eleven ransomware-linked Salesforce breach on April 17, followed by a May 1 notification effort after dark web data leakage.
5/19/2026 • Data Breaches & Exposure Events • General
7-Eleven notified the Maine Attorney General in 2026 and started letters May 1 after unauthorized access exposed franchise application personal data.
5/18/2026 • Data Breaches & Exposure Events • General