7-Eleven Discloses Data Breach Affecting Franchisee Documents
**7-Eleven**, the international convenience store chain, recently disclosed a data breach impacting a system used for storing franchisee-related documents. The breach, which exposed sensitive information like names, addresses, and Social Security numbers, is under investigation.
Convenience store giant **7-Eleven** has announced a data breach affecting a system used to store documents related to its franchises.
### Breach Details
The company reported the data breach to state regulators in Maine, Vermont, and Massachusetts this week. According to breach notification letters, **7-Eleven** discovered the incident on April 8th and determined that cybercriminals had gained unauthorized access to systems containing franchisee documents.
The compromised data includes names, addresses, and Social Security numbers. The company has not yet responded to requests for comment regarding what other types of information may have been affected.
### Background
**7-Eleven**, owned by Japanese retail company **Seven & I Holdings**, operates approximately 86,000 stores across 19 countries, with nearly 10,000 of those stores being franchises in the U.S.
### ShinyHunters Connection
These breach notifications come after reports that the cybercriminal organization **ShinyHunters** had stolen data from **7-Eleven** held on **Salesforce** in late April.
**ShinyHunters** has a history of targeting data storage tools to steal large amounts of data from high-profile companies. They were recently involved in a nationwide scandal following an attack on educational software provider **Instructure**, prompting an **FBI** warning.
### FBI Warning on ShinyHunters
The **FBI** has described **ShinyHunters** as a cybercriminal group specializing in large-scale data breaches and extortion. They target major companies across various sectors, including tech, finance, and retail, often stealing millions of customer records at once.
According to the **FBI**, "[**ShinyHunters**] actors' access to sensitive data could provide them an opportunity to sell the stolen data to other cyber criminals or reuse stolen data from education platforms to impersonate school faculty, IT support, financial aid offices or others in future attacks."
The **FBI** urges any organization impacted by a **ShinyHunters** attack to contact them immediately.
[](https://www.recordedfuture.com/?utm_source=therecord&utm_medium=ad)