7-Eleven

7-Eleven disclosed an April 2026 breach of systems holding franchisee/franchise-applicant documents, claimed by the ShinyHunters extortion group - the campaign documented in the F500 Tech & Semiconductors tab that reached more than a thousand organisations through social engineering and OAuth abuse rather than any technical exploit. Convenience retail also runs heavily franchised, so a customer's transaction and loyalty data may sit with an independent operator rather than the national brand, and the answer to who to contact after a breach differs by store.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — standard binding arbitration + class action waiver expected.

Data sharing

[keep text through '...7-Eleven has not confirmed the attribution or a count.'] and delete the final sentence about two N.D. Tex. class actions unless re-sourced.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.