7-Eleven data breach affects over 185,000 people’s personal data

Source: TechCrunch

Overview

Data breach notification service Have I Been Pwned says a data breach at convenience store chain 7‑Eleven affects over 185,000 people, including their names, dates of birth, and physical addresses. The breach, reported in April, also included phone numbers and email addresses.

Attack Details

Have I Been Pwned, which collects caches of data breaches and alerts affected individuals, listed the incident as a hack‑and‑extortion attack. The ShinyHunters group claimed responsibility, stating they would publish the data if they weren’t paid.

Statements from Authorities

• According to a listing with Maine’s attorney general’s office, 7‑Eleven chief information security officer Jim Kastle said the hackers gained access to an internal server containing franchisee documents.
  Source: Maine AG

• A separate listing with Massachusetts’ attorney general indicated the breach also included Social Security numbers and driver’s licenses.
  Source: Massachusetts AG

Further Information

For more details on the breach, see the Have I Been Pwned listing: 7‑Eleven Breach