7-Eleven data breach affects over 185,000 people's personal data | TechCrunch

A data breach notification service reported that a convenience store chain breach affected more than 185,000 people. Exposed information included names, dates of birth, physical addresses, phone numbers, and email addresses. The incident was described as a hack-and-extortion attack, with a group taking credit and threatening to publish data if payment was not made. Statements attributed to a chief information security officer said hackers accessed an internal server containing franchisee documents. Separate information from state attorney general listings said the breach also included Social Security numbers and driver’s license details.

"Have I Been Pwned says a data breach at convenience store chain 7-Eleven affects over 185,000 people, including their names, dates of birth, and physical addresses. The data breach, reported in April, also included phone numbers and email addresses."

"Have I Been Pwned, which collects caches of data breaches and alerts affected individuals that their data was compromised, said in a new listing that 7-Eleven was the victim of a hack-and-extortion attack. The ShinyHunters group took credit for the breach, saying they would publish the data if they weren't paid."

"Per a listing with Maine's attorney general's office, 7-Eleven chief information security officer Jim Kastle said the hackers gained access to an internal server containing franchisee documents. A separate listing with Massachusetts' attorney general said the breach also included Social Security numbers and driver's licenses."

Read at techcrunch.com