7-Eleven data breach affects over 185,000 people’s personal data

Data breach notification service Have I Been Pwned says a data breach at convenience store chain 7-Eleven affects over 185,000 people, including their names, dates of birth, and physical addresses.

The data breach, reported in April, also included phone numbers and email addresses.

Have I Been Pwned, which collects caches of data breaches and alerts affected individuals that their data was compromised, said in a new listing that 7-Eleven was the victim of a hack-and-extortion attack. The ShinyHunters group took credit for the breach, saying they would publish the data if they weren’t paid.

Per a listing with Maine’s attorney general’s office, 7-Eleven chief information security officer Jim Kastle said the hackers gained access to an internal server containing franchisee documents. A separate listing with Massachusetts’ attorney general said the breach also included Social Security numbers and driver’s licenses.