7-Eleven has confirmed a data breach after the ShinyHunters hacker group claimed to have stolen information from its systems. The intrusion into a franchise documents storage area was detected on 8 April, and the hackers claimed more than 600,000 Salesforce records, including personal information and corporate data, were taken. According to a notification submitted to the Maine Attorney General’s Office, unspecified personal information has been compromised, with two Maine residents reported as affected.
SHINYHUNTERS listed 7-Eleven on its leak site on 17 April, initially demanding a ransom by 21 April and later offering to sell the data for $250,000. The group has been targeting Salesforce instances of major organisations since mid-2025, and has previously claimed attacks on Instructure, Vimeo, Wynn Resorts, Vercel, and Medtronic.