7-Eleven hit with data breach: What Canadians need to know
A hacker group calling themselves “ShinyHunters” claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data from 7-Eleven.
In a list that the hackers posted on their website on April 17, the group threatened to leak the data unless a ransom was paid by April 21. They later offered to sell the stolen data for $250,000 on a popular hacker forum, though personal information has not been specified to date. ShinyHunters eventually leaked the alleged 7-Eleven info on April 22nd.
The exact number of Canadian franchises affected in the April 2026 7-Eleven cyberattack remains undisclosed. The extortionists compromised internal systems storing franchisee documents and Salesforce records rather than customer-facing point-of-sale systems in Canada.
“The company failed to reach an agreement with us despite our incredible patience, all the chances and offers we made. They don't care,” ShinyHunters said.
7-Eleven responded by launching an investigation regarding the affected documents, and determined that it included information provided to the company during their franchise application process, including name, address and social security numbers.
As of May 15, 7-Eleven has begun sending a "Notice of Security Incident" letter to affected individuals in the United States, according to a sample letter filed with the Maine Attorney General's Office. At this time, state-level data breach filings in the U.S. showed only about 50 individuals were impacted across Massachusetts, Maine and Vermont.
7-Eleven has confirmed that everyday customer data was not compromised and store operations remain unaffected. The company has not publicly released a localized number for affected Canadian franchisees.
