7-Eleven data breach affects over 185,000 people’s personal data

Summary

Data breach notification service Have I Been Pwned says a data breach at convenience store chain 7-Eleven affects over 185,000 people, including their names, dates of birth, and physical addresses. The data breach, reported in April, also included phone numbers and email addresses. Have I Been Pwned, which collects caches of data breaches and alerts affected individuals that their data was compromised, said in a new listing that 7-Eleven was the victim of a hack-and-extortion attack. The ShinyHunters group took credit for the breach, saying they would publish the data if they weren’t paid. Per a listing with Maine’s attorney general’s office, 7-Eleven chief information security officer Jim Kastle said the hackers gained access to an internal server containing franchisee documents. A separate listing with Massachusetts’ attorney general said the breach also included Social Security numbers and driver’s licenses.