7-Eleven 7-eleven.com 7-Eleven data breach: what happened and what to do
In April 2026, 7-Eleven was hit by a pay-or-leak extortion campaign by ShinyHunters, and the data was published that month. Have I Been Pwned counts about 185,000 email addresses, with names, physical addresses, dates of birth and phone numbers.
View all 13,115 breaches- Breach date
- 8 Apr 2026
- Affected
- 185,256
- Data exposed
- Dates of birth, Email addresses, Names, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
In April 2026, 7-Eleven was the victim of a pay-or-leak extortion campaign by the ShinyHunters group. Have I Been Pwned dates the breach to April 8, 2026, and says the data was published later that month. BleepingComputer reported that 7-Eleven confirmed the breach.
7-Eleven said the incident was limited to certain systems used to store franchisee documents. Have I Been Pwned notes that this statement fits the data that was exposed.
What was exposed
Have I Been Pwned counts 185,256 unique email addresses. The records also include names, physical addresses, dates of birth and phone numbers, and a small number of records had additional fields. Because the source was franchisee documents, the people involved are mostly franchise owners and applicants, not everyday shoppers.
What it means for you
A name, address, date of birth and phone number is a ready-made set for identity theft. It's the information many lenders and carriers ask for to verify you. It also lets a scammer write a message that sounds legitimate, for example about a franchise application, a business loan or a lease.
If you applied for or hold a 7-Eleven franchise, treat any call or email about your application or your business accounts as suspect until you've verified it independently. Consider a credit freeze if you're in the US, because the exposed details are the ones used to open accounts in someone else's name.
What to do if you were in it
- 1
Freeze your credit
A free credit freeze at Equifax, Experian and TransUnion stops new accounts being opened in your name. It doesn't affect your existing cards or your score.
- 2
Expect phishing that mentions the breach
Criminals use your name, address and phone number to write messages that look personal. Don't click links in unexpected emails or texts about your account. Go to the site directly instead.
- 3
Verify anyone who calls about a franchise or business account
Hang up and call the company on a number you already have. Scammers use real application details to sound credible.
- 4
Watch your statements and credit reports
You can pull your reports for free at annualcreditreport.com. Look for accounts or inquiries you don't recognize.
- 5
Check whether your email or phone is in this and other breaches
Run a free scan with Serus to see which breaches include your email address or phone number. Serus monitors breach databases and the dark web and alerts you if your data shows up again.
Frequently asked
Was I affected by the 7-Eleven data breach?
Search your email address on Have I Been Pwned. The data came from systems used to store franchisee documents, so franchise owners and applicants are the most likely to be in it.
What was exposed?
Email addresses, names, physical addresses, dates of birth and phone numbers, plus extra fields in a small number of records.
Were customer payment cards stolen?
7-Eleven said the breach was limited to certain systems used to store franchisee documents.
Should I freeze my credit?
If you're in the US and your name, address and date of birth were exposed, a credit freeze is a sensible, free precaution.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
