7-Eleven confirms data breach claimed by the ShinyHunters gang

7-Eleven has confirmed a data breach after the ShinyHunters extortion gang claimed responsibility for an April 8, 2026 attack on the company's Salesforce environment. The attackers allegedly stole over 600,000 records containing corporate data and personally identifiable information. After 7-Eleven refused to pay a ransom, ShinyHunters leaked a 9.4GB archive on their dark web site. The breach affected systems used to store franchisee documents, and notifications were sent to affected individuals on May 1. ShinyHunters has been on a broader campaign targeting Salesforce customers, with recent victims including the European Commission, Vimeo, McGraw-Hill, Medtronic, and others. The FBI has advised victims not to pay ransoms.