ShinyHunters breach at 7-Eleven exposes SSNs and personal data of 185,000 people

[ref]

7-Eleven disclosed a hack-and-extortion attack that exposed personal data belonging to more than 185,000 people, according to filings with state attorneys general and a new listing on breach-notification service Have I Been Pwned. The compromised data includes names, dates of birth, postal addresses, phone numbers, email addresses, Social Security numbers, and driver’s licenses. 7-Eleven CISO Jim Kastle said in a filing with Maine’s attorney general that the attackers gained access to an internal server storing franchisee documents. The ShinyHunters group claimed responsibility for the breach — the same group behind a string of high-profile attacks in recent years — and threatened to publish the stolen data unless the company paid a ransom. The breach was first reported in April.

TechCrunch

7-Eleven data breach affects over 185,000 people's personal data | TechCrunch