Threatline

7-Eleven - 185,256 breached accounts

In April 2026, , with the data later published that month. The incident exposed 185k unique email addresses, along with names, physical addresses, dates of birth and phone numbers. A small number of records also contained additional exposed data fields. The company later advised the breach was limited to "certain 7-Eleven systems used to store franchisee documents", a statement consistent with the exposed data. 7-Eleven was the victim of a "pay or leak" extortion campaign by ShinyHunters