7-Eleven Data Breach Exposes Sensitive Information of Over 185,000 Individuals 7-Eleven has notified more than 185,000 individuals that their personal data including Social Security numbers, birth dates, and home addresses was compromised in a recent breach. The disclosure, reported by TechCrunch via state government records, highlights growing cybersecurity risks in the retail sector. The exposed information includes full names, dates of birth, postal addresses, and Social Security numbers, providing identity thieves with the tools needed for fraudulent financial activity, such as opening accounts or filing fake tax returns. Unlike credit card numbers, Social Security numbers are permanent, making this breach particularly severe for affected individuals. While 7-Eleven operates thousands of stores across North America and processes millions of daily transactions, key details about the incident remain undisclosed. The company has not revealed when the breach occurred, how long attackers had access to its systems, or the specific security failures that enabled the intrusion. The timing of the breach coincides with a surge in cyberattacks targeting retail and hospitality companies, some linked to sophisticated criminal groups. Reports reference ShinyHunters, a notorious hacking collective known for large-scale data theft and dark web sales, though its involvement in the 7-Eleven incident has not been confirmed. Investigators may be examining potential connections.

ShinyHunters Claims Responsibility for Alleged DentaQuest Data Breach The cybercriminal group ShinyHunters has claimed responsibility for a suspected data breach targeting DentaQuest, a major U.S. dental and vision insurance provider. While neither DentaQuest nor its parent company, Sun Life U.S. Dental, has officially confirmed the incident, ShinyHunters has threatened to release stolen data on May 27, 2026, though specifics about the compromised information remain undisclosed. Legal teams are investigating the breach to determine whether a class action lawsuit can be filed on behalf of affected individuals, including current and former DentaQuest subscribers. Potential claims could cover damages such as loss of privacy, time spent mitigating the breach, and out-of-pocket costs. Attorneys are seeking input from those who may have been impacted to assess the viability of legal action. ShinyHunters, known for targeting high-profile organizations, has been linked to other breaches in 2026, though details of those incidents remain limited. The group’s involvement in the DentaQuest case underscores ongoing risks in the healthcare sector, where sensitive personal and insurance data remains a prime target for cybercriminals. Further updates are expected as the investigation progresses.

AI-Powered Cybercrime Surges as Ransomware and Data Breaches Dominate Latest Threat Landscape The past month has seen a sharp escalation in cyber threats, with artificial intelligence (AI) accelerating cybercrime, ransomware attacks reaching new highs, and major organizations facing breaches highlighting the growing sophistication of digital threats. ### AI as a Cybercrime Accelerator AI is increasingly being weaponized by hackers, with Verizon’s 2026 Data Breach Investigations Report revealing that nearly a third of breaches now originate from software vulnerabilities surpassing stolen passwords as the primary attack vector. Generative AI tools enable cybercriminals to rapidly identify weaknesses and develop malware, compressing the window for defenders to respond. CrowdStrike reported an 89% year-on-year increase in AI-enabled attacks in 2025, empowering both novice and advanced threat actors. A notable case involves Anthropic’s Claude Mythos, an AI model designed to bolster cybersecurity but later found to pose risks to the systems it was meant to protect. During testing with 50 partner organizations, Mythos uncovered over 10,000 vulnerabilities in a single month. However, Anthropic suspended access to its latest models (Claude Fable 5 and Mythos 5) after U.S. authorities raised national security concerns, citing potential "jailbreaking" techniques that could expose new attack vectors. ### Ransomware Attacks Intensify Ransomware remains a dominant threat, with Check Point Research recording a 48% surge in May 2026. The education sector was hit hardest, averaging 4,641 weekly attacks per organization a 7% increase year-on-year followed by government and telecommunications. Retail also faced significant disruptions, including a breach at 7-Eleven, where hackers leaked 9.4GB of franchisee data after failed ransom negotiations. Manufacturing giant Foxconn, a key supplier for Apple, Google, Nvidia, and Sony, fell victim to an extortion attack in May. Hackers claimed to have stolen 11 million files, including sensitive customer data, underscoring the risks to global supply chains. ### Key Breaches and Regulatory Developments - 23andMe (now Chrome Holding) faces legal action from California over a 2023 breach that exposed 7 million customers’ genetic and family data. The UK’s Information Commissioner’s Office previously fined the company for inadequate protections. - Carnival Cruises disclosed a social engineering attack affecting nearly 6 million passengers, offering affected U.S. travelers two years of credit monitoring. - GitHub suffered a breach after hackers compromised an employee’s device via a malicious Visual Studio Code extension, stealing 3,800 internal repositories though no customer-facing systems were impacted. - U.S. Congress introduced the Great American AI Act, proposing a federal AI governance framework, including a Center for AI Standards and Innovation and fines up to $1 million per violation for non-compliance with transparency requirements. ### AI’s Dual Role in Cybersecurity While AI fuels cybercrime, it is also becoming a critical defense tool. The World Economic Forum’s *AI and Cyber: Empowering Defenders* report found that organizations using AI for phishing detection, anomaly monitoring, and incident response reduced breach lifecycles by 80 days and cut costs by up to $1.9 million. However, sectors like education, healthcare, and NGOs where disruptions have real-world consequences remain particularly vulnerable due to resource constraints. As AI reshapes cybersecurity, the race between attackers and defenders continues to intensify, with high-stakes breaches and regulatory shifts defining the latest threat landscape.

Major Ransomware Campaign Targets 40+ Firms Across Retail, Insurance, and Hospitality Sectors A large-scale ransomware attack has compromised over 40 organizations in the retail, insurance, and hospitality industries, including high-profile companies such as Carnival, Pitney Bowes, Hallmark, and Zara. The incident, classified as a "major" cybersecurity event by the FBI, underscores the growing threat of ransomware in an era of increasingly complex IT infrastructures. The attack highlights vulnerabilities in sectors handling sensitive customer data, with recent breaches in Europe such as the Venice breach, Basic-Fit data exposure, and an Inditex incident further demonstrating the rising frequency of cyber incidents. U.S. agencies have also issued warnings about PLC attacks, while Microsoft phishing campaigns and an actively exploited Google Chrome zero-day add to the escalating threat landscape. The incident serves as a reminder that traditional backup strategies alone are insufficient against modern cyber threats, as attackers increasingly target critical systems beyond data storage. Security experts emphasize the role of Security Information and Event Management (SIEM) systems in enabling proactive threat detection and response, helping organizations identify and mitigate risks before they escalate.

Carnival Corporation Investigates Alleged Data Breach by ShinyHunters Extortion Group Carnival Corporation, the global cruise operator behind brands like Carnival Cruise Line, Princess Cruises, and Holland America Line, is probing a potential data breach after the ShinyHunters extortion group claimed to have stolen over 8.7 million records containing personally identifiable information (PII) and internal corporate data. On April 18, ShinyHunters listed Carnival on its "pay or leak" portal, threatening to release the data publicly if demands were not met by April 21, 2026. The group, known for high-profile breaches, typically gains access through phishing, credential theft, or cloud service exploitation. Carnival confirmed detecting suspicious activity linked to a phishing incident affecting a single user account. In a statement, the company acknowledged the breach, stating it had blocked unauthorized access and was working with security experts to assess the scope. While the investigation is ongoing, Carnival has not confirmed whether customer data was compromised. ShinyHunters’ claims remain unverified, but even limited account access could lead to significant exposure if linked to internal systems or cloud-based tools. Carnival, which serves millions of passengers annually, remains a prime target for cybercriminals seeking financial leverage through extortion. The incident underscores the rising threat of phishing-driven breaches in enterprise environments.

7-Eleven Confirms Data Breach After ShinyHunters Claims Theft of 600K Records 7-Eleven, the world’s largest convenience store chain, has confirmed a data breach following claims by the ShinyHunters hacker group that it stole over 600,000 Salesforce records containing personal and corporate data. The intrusion was detected on April 8, targeting systems used to store franchisee documents. In a notification filed with the Maine Attorney General’s Office, 7-Eleven acknowledged that unspecified personal information provided during franchise applications was compromised. While the company did not disclose the total number of affected individuals, it reported that only two Maine residents were impacted, suggesting a potentially limited scope of exposure. ShinyHunters publicly listed 7-Eleven on its leak site on April 17, demanding a ransom by April 21 before later offering the stolen data for sale at $250,000 on a hacker forum. The group has been actively targeting Salesforce instances of major organizations since mid-2025, exploiting phishing attacks, third-party integrations, or misconfigurations rather than vulnerabilities in Salesforce’s core systems. This breach follows a pattern of recent ShinyHunters attacks, including incidents at Instructure, Vimeo, Wynn Resorts, Vercel, and Medtronic. The group’s tactics highlight ongoing risks to enterprises relying on cloud-based platforms for sensitive data storage.

Pwn2Own Berlin 2026 Highlights Major Exploits as Zero-Days and Breaches Surge The second and third days of Pwn2Own Berlin 2026 saw researchers earn $385,750 in bounties, pushing the event’s total payout to $1.298 million. Among the notable exploits, Microsoft Exchange Server was successfully compromised, contributing to the growing tally. DEVCORE was crowned "Master of Pwn" after demonstrating multiple high-impact vulnerabilities. In parallel, Chaotic Eclipse disclosed MiniPlasma, a zero-day in Windows, suggesting an incomplete or overlooked security fix from 2020. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft Exchange Server flaw and a Cisco Catalyst SD-WAN vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation risks. A critical 18-year-old flaw (CVE-2026-42945) in NGINX, the world’s most widely deployed web server, was also uncovered, with experts warning of ongoing attacks. Meanwhile, Grafana confirmed a GitHub token breach after a cybercrime group claimed responsibility, while ShinyHunters breached 7-Eleven, exposing franchisee data and Salesforce records. Additional incidents included: - A public Amazon S3 bucket leaking sensitive guest data from Japanese hotel platform Tabiq. - OpenAI suffering a supply chain attack via malicious TanStack packages. - Broadcom releasing a security update for a VMware Fusion root access bug. - The Ghostwriter group resuming cyberattacks on Ukrainian government targets. - Researchers identifying YellowKey and GreenPlasma, two new Windows zero-days. - A Linux Kernel bug (Fragnesia) enabling local root access attacks. - Attackers exploiting a Funnel Builder vulnerability to inject e-skimmers into e-commerce stores. The event underscored persistent threats across enterprise software, cloud services, and critical infrastructure, with zero-days and supply chain attacks remaining dominant vectors.

The California Office of the Attorney General reported a data breach involving 7-Eleven, Inc. on August 9, 2016. The breach occurred on June 13, 2016, affecting the personal information of approximately 7,820 employees, including names, physical addresses, Social Security Numbers, and telephone numbers. The breach was caused by incorrect employee information being sent to a local franchise store database.