CyberSIXT Search
Original
Image: SecurityWeek

SecurityWeekEduard Kovacs

ShinyHunters leaks 600k Salesforce records from 7Eleven breach

Part of the ShinyHunters story · 153 articles · 16 outlets · since 1 Apr

7-Eleven has confirmed a data breach after the ShinyHunters hacker group claimed to have stolen information from its systems. The intrusion into a franchise documents storage area was detected on 8 April, and the hackers claimed more than 600,000 Salesforce records, including personal information and corporate data, were taken. According to a notification submitted to the Maine Attorney General’s Office, unspecified personal information has been compromised, with two Maine residents reported as affected.

ShinyHunters listed 7-Eleven on its leak site on 17 April, initially demanding a ransom by 21 April and later offering to sell the data for $250,000. The group has been targeting Salesforce instances of major organisations since mid-2025, and has previously claimed attacks on Instructure, Vimeo, Wynn Resorts, Vercel, and Medtronic.

Story timeline ShinyHunters

Full timeline
Show as table
ShinyHunters coverage
Published (UTC)OutletHeadline
Fri 14 Aug · 08:50 UTCSecurityWeekTrezor breach leaks 14,000 customers' data via ShipMonk
Fri 14 Aug · 10:31 UTCSecurityWeekRingCentral breach by ShinyHunters exposes 1.6 million records
Sun 23 Aug · 15:41 UTCDataBreachesShinyHunters claim ReliaQuest hack, then delete tweet amid denial
Mon 24 Aug · 12:17 UTCDataBreachesReliaQuest refutes ShinyHunters leak, says fake login was used
Mon 24 Aug · 17:56 UTCSecurityWeekReliaQuest blocks ShinyHunters phishing, confirms no data breach
Tue 25 Aug · 09:40 UTCInfosecurityReliaQuest says breach attempt exposed only view only dashboard
Sat 29 Aug · 01:32 UTCDataBreachesMcKesson investigates breach after ShinyHunters claim 284M records
Mon 31 Aug · 13:18 UTCSecurityWeekMcKesson Breach: ShinyHunters Claims 284 Million Records Stolen
Mon 31 Aug · 15:31 UTCMalwarebytesMcKesson suffers data breach after ShinyHunters voice phishing attack
Tue 1 Sep · 08:56 UTCInfosecurityMcKesson Probes ShinyHunters Hack Exposing 284 Million Records
Thu 3 Sep · 20:30 UTCDark ReadingReliaQuest Says ShinyHunters Phishing Attack Was Contained
Thu 10 Sep · 14:00 UTCDataBreachesMcKesson Data Breach Exposes 6.4 Million After ShinyHunters Leak
Sat 19 Sep · 14:25 UTCDataBreachesShinyHunters Claims It Breached and Defaced Clop’s Leak Site
Mon 21 Sep · 11:01 UTCMalwarebytesShinyHunters Hijacks Clop Leak Site and Threatens to Expose Victims
Mon 21 Sep · 12:49 UTCInfosecurityShinyHunters Claims It Hacked and Extorted Clop Ransomware Group
Mon 21 Sep · 15:01 UTCSOCRadarShinyHunters Hijacks Clop Leak Site and Threatens to Expose Secrets
Mon 21 Sep · 20:53 UTCDark ReadingShinyHunters Claims Breach of Rival Clop’s Leak Site and Demands Bitcoin
Tue 22 Sep · 19:11 UTCDataBreachesShinyHunters Claims FBI Breach Exposed Employees’ Private Data
Wed 23 Sep · 07:00 UTCThe Hacker NewsShinyHunters Claims FBI Breach Exposed Agents and Job Applicants
Wed 23 Sep · 07:36 UTCSecurityWeekShinyHunters Claims FBI Breach Exposed Agents’ Personal Data
Wed 23 Sep · 10:30 UTCInfosecurityShinyHunters Claims FBI Breach Exploited Oracle PeopleSoft Zero-Day
Wed 23 Sep · 12:49 UTCMalwarebytesShinyHunters Claims FBI Breach Exposed Agents’ Personal Data
Wed 23 Sep · 14:38 UTCSecurity AffairsShinyHunters Claims FBI Applicant Data Breach via Oracle Flaw
Wed 23 Sep · 21:50 UTCArs TechnicaFBI Investigates ShinyHunters Claim of Recruitment Site Breach
Thu 24 Sep · 09:59 UTCSecurityOnlineShinyHunters Claims FBI Breach Exploited Oracle PeopleSoft Zero Day
Fri 25 Sep · 15:18 UTCSecurityWeekBragJack Lets Malicious Extensions Hijack Browser AI Assistants
Sat 26 Sep · 07:14 UTCGoogle CloudShinyHunters Expands Global Oracle PeopleSoft Exploitation Campaign
Mon 28 Sep · 07:30 UTCMalwarebytesMalwarebytes Warns of AI Backdoors, ClickFix Traps and Phishing
Mon 28 Sep · 09:47 UTCMalwarebytesAlleged FBI Medical Records Leak Exposes Employees’ Private Details
Mon 28 Sep · 11:30 UTCSecurityWeekShinyHunters Revive Attacks on PeopleSoft with WAF Bypass
Mon 28 Sep · 14:30 UTCCheck PointCheck Point Warns of Active Exploits and AI-Powered Attacks
Mon 28 Sep · 15:30 UTCKrebs on SecurityDutch Police Arrest Suspected ShinyHunters Hacker After Major Breaches
Mon 28 Sep · 16:36 UTCDataBreachesDutch Hacker Arrested Again as ShinyHunters Links Remain Unproven
Tue 29 Sep · 08:35 UTCSecurity AffairsDutch Police Arrest Alleged ShinyHunters Member in Odido Probe
Tue 29 Sep · 10:22 UTCThe Hacker NewsDutch Police Arrest Suspected ShinyHunters Member in Amsterdam
Tue 29 Sep · 11:30 UTCSecurityWeekDutch Police Arrest Suspected ShinyHunters Member in Ongoing Probe
Tue 29 Sep · 13:14 UTCDataBreachesShinyHunters Claim They Will Not Publish Stolen FBI Personnel Data
Tue 29 Sep · 18:57 UTCDataBreachesDutch Hacker Faces Murder Solicitation Charges in ShinyHunters Probe
Wed 30 Sep · 10:50 UTCSecurityWeekFBI Urges ShinyHunters Members to Turn Informant After Arrest
Sat 3 Oct · 16:22 UTCDataBreachesShinyHunters Hacker Detained in Jordan and Reportedly Aids FBI Investigation
Sun 4 Oct · 08:00 UTCThe Hacker NewsShinyHunters Suspect Detained in Jordan and Cooperates With FBI
Sun 4 Oct · 14:57 UTCSecurity AffairsShinyHunters Suspect Cooperates With FBI to Expose Group Associates
Mon 5 Oct · 07:35 UTCSecurityWeekTeen Hacker Arrested After ShinyHunters Claims FBI Data Breach
Mon 5 Oct · 09:57 UTCSecurityOnlineJordan Detains ShinyHunters Suspect Said to Be Helping FBI
Tue 6 Oct · 07:46 UTCThe Hacker NewsFBI removes Accenture contractor after ShinyHunters breach exposes staff data
Tue 6 Oct · 10:42 UTCSecurity AffairsFBI Drops Accenture Contractor After Breach Exposed Staff Data
Tue 6 Oct · 14:27 UTCSecurityWeekFBI Removes Accenture Contractor After Employee Data Breach
Wed 7 Oct · 10:50 UTCMalwarebytesShinyHunters Suspect Arrested in Jordan as FBI Tightens the Net
Wed 7 Oct · 14:31 UTCKrebs on SecurityTeen ShinyHunters Member Detained During Boeing Unit Extortion Attempt
Fri 9 Oct · 17:36 UTCDark ReadingPentagon Data Breach Exposes Records of 3.1 Million People
Fri 9 Oct · 19:24 UTCThe Hacker NewsFBI Arrests Suspected ShinyHunters Co-Conspirator in Pennsylvania
Sat 10 Oct · 01:00 UTCKrebs on SecurityFBI arrests ransomware negotiator in ShinyHunters extortion probe
Sat 10 Oct · 12:24 UTCDataBreachesFBI Arrests Canadian Man in ShinyHunters Hack Investigation
Mon 12 Oct · 10:22 UTCInfosecurityFBI Arrests Canadian Cybersecurity Executive Over ShinyHunters Ties
Mon 12 Oct · 10:58 UTCSecurityWeekCybersecurity Executive Arrested in FBI ShinyHunters Investigation
Mon 12 Oct · 22:36 UTCSecurity AffairsCanadian Ransomware Negotiator Arrested in FBI ShinyHunters Crackdown
Tue 13 Oct · 13:28 UTCDataBreachesExperts and Ransomware Groups Weigh In on ShinyHunters’ Future
Thu 15 Oct · 12:49 UTCDataBreachesUK Legal Aid Agency Breach Exposed Data Dating Back Before 2007
Fri 16 Oct · 14:26 UTCDark ReadingRansomware Negotiator’s Arrest Exposes Crisis Vendor Vetting Gaps
Mon 19 Oct · 14:00 UTCKrebs on SecurityUS Investigators Probe Ransom Negotiators’ Ties to ShinyHunters

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device