SHINYHUNTERS has claimed a breach at 7-Eleven, saying it stole more than 600,000 Salesforce records and franchisee data. 7-Eleven confirmed the breach after an unauthorized party accessed systems storing franchisee documents on 8 April 2026, and said it had launched an investigation. The group purportedly threatened to publish the stolen data if a ransom was not paid by 21 April 2026, and the files reportedly include information submitted by individuals during the franchise application process.
According to ShinyHunters, the 600k-plus Salesforce records contain PII and other internal corporate data, though the total number of affected individuals remains unclear. Security Affairs notes that ShinyHunters has been targeting Salesforce instances of major organisations since mid-2025, claiming breaches at various high-profile targets.