7-Eleven Japan reports data breach affecting 160,000 customers

7-Eleven Japan disclosed that unauthorized access to the systems of an outsourced delivery partner led to the exposure of personal information for approximately 160,000 customers. The compromised data includes names, residential addresses, and telephone numbers. According to the company, no credit card information or account passwords were part of the data leak.

The breach was identified on November 1, with the company confirming the scope of the incident on November 3. While the investigation remains ongoing, 7-Eleven Japan stated that the '7NOW' home delivery service continues to operate without interruption. The company has initiated a notification process for affected users via SMS.

This incident follows a pattern of cybersecurity challenges for the retail chain. Earlier this year, the company reported a breach by the hacker group ShinyHunters involving 183,000 users, and in 2022, the Danish subsidiary faced a significant ransomware attack that disrupted operations at 175 stores. The repeated nature of these incidents underscores the vulnerability of retail supply chains to third-party data breaches.