Privacy Unpacked

Confirmed breach

Seven-Eleven Japan data breach

JPJapan · セブン‐イレブン・ジャパン

Yahoo! News and news.web reported a data breach at Seven-Eleven Japan (Japan) on 3 November 2026, and it has been confirmed. It affected 160,000 users.

What we know as of

Status
Confirmed.
People affected
160,000 users.
What was exposed
Phone numbers, Names, Addresses and User information.
When
First reported 3 November 2026.
How
Hacking, through CBcloud.
Seven-Eleven Japan’s record
No earlier breach on record under this name.

Not known yet: when it began and who was behind it. This page is updated as notices and statements come in.

Every fact above has its source below. Journalists: free to quote with credit (“Privacy Unpacked data breach tracker”, with a link to this page and the date); the figures can move. Follow this breach (feed) · Every major breach · Ask us for a figure

People affected
160,000users
Reported
3 November 2026News report and 1 more

What was exposed 4

  • Phone numbers
  • Names
  • Addresses
  • User information

How it happened

How
Hacking received unauthorized access source
Our translation from Japanese不正アクセスを受け
Through
CBcloud PickGo, operated by CBcloud Inc., received unauthorized access source
Our translation from JapaneseCBcloud社が運営する「ピックゴー」が不正アクセスを受けたため
Way in
PickGo PickGo, operated by CBcloud Inc., which handles some of the delivery operations for 7NOW, received unauthorized access source
Our translation from Japanese7NOWの一部の配達業務を委託しているCBcloud社が運営する「ピックゴー」が不正アクセスを受けたため

Sources 2

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

Questions about the Seven-Eleven Japan breach

Was Seven-Eleven Japan hacked?

Yahoo! News and news.web reported a data breach at Seven-Eleven Japan (Japan) on 3 November 2026, and it has been confirmed. It affected 160,000 users. How it happened, by the sources: hacking, through CBcloud.

What data was exposed in the Seven-Eleven Japan breach?

Phone numbers, Names, Addresses and User information, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Seven-Eleven Japan data breach settlement?

No settlement open for claims is on record for Seven-Eleven Japan as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Seven-Eleven Japan breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Seven-Eleven Japan’s own site, or check the letter here.

More breaches in Japan

  1. Yamada DenkireportedJPJapan · 14 November 2026 Phone numbersNamesAddresses+2 3.5Mcustomers
  2. Kochi CityreportedJPJapan · 14 November 2026 Personal information 1.5Kpeople
  3. Monex SecuritiesreportedJPJapan · 13 November 2026 Driver’s license numbersEmail addresses 1.1Memail addresses
  4. City of OsakareportedJPJapan · 13 November 2026 Email addresses 1Memail addresses
  5. Cybersecurity CloudreportedJPJapan · 13 November 2026 Email addressesNamesOrganization names+1 –not reported

Every breach in Japan →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.