7-Eleven class action lawsuit overview:
- Who: Plaintiffs Carl Ellison and Rebecca Choplin filed separate class action lawsuits against 7-Eleven Inc.
- Why: Ellison and Choplin claim 7-Eleven failed to adequately protect the personally identifiable information of consumers during a data breach in April.
- Where: The 7-Eleven class action lawsuits were both filed in Texas federal court.
ATwo class action lawsuits separately accuse convenience store chain 7-Eleven of failing to adequately protect the personally identifiable information (PII) of consumers during an April 2026 data breach.
Plaintiffs Carl Ellison and Rebecca Choplin, in class action lawsuits filed separately in Texas federal court, similarly argue 7-Eleven failed to protect consumers’ PII and failed to “even encrypt or redact this highly sensitive information.”
“This unencrypted, unredacted private information was compromised due to [7-Eleven’s] negligent and/or careless acts and omissions and its utter failure to protect individuals’ sensitive data,” the lawsuits say.
The 7-Eleven class action lawsuits cite “public reports” that 7-Eleven allegedly experienced the data breach in April 2026 and was the victim of a “pay or leak” extortion campaign, which exposed private information stored on its network and systems.
Ellison and Choplin each want to represent a nationwide class of all persons whose private information was compromised as a result of the data breach.
Extortion group takes credit for 7-Eleven data breach, class action says
A “notorious” cybercriminal extortion group called ShinyHunters claimed responsibility for the data breach on April 17, 2026, stating in a blog post at that time that it had stolen more than 600,000 records containing PII from 7-Eleven, according to the complaints.
Ellison and Choplin claim in their class action lawsuits that ShinyHunters has already posted the private information for download on its dark web site.
7-Eleven, meanwhile, is accused by both Ellison and Choplin of disregarding the rights of those affected by the data breach by “intentionally, willfully, recklessly or negligently failing to take adequate and reasonable measures to ensure that its network servers were protected against unauthorized intrusions.”
Ellison and Choplin argue 7-Eleven failed to “take standard and reasonably available steps to prevent the data breach.”
Furthermore, they allege the company concealed the existence and extent of the data breach “for an unreasonable duration of time” and failed to disclose that it did not have “adequately robust security protocols and training practices in place to safeguard the plaintiff’s and class members’ private information.”
Both class action lawsuits claim 7-Eleven is guilty of unjust enrichment, breach of implied contract and negligence/negligence per se.
Ellison and Choplin both demand a jury trial and request declaratory and injunctive relief and an award of actual, nominal and consequential damages for themselves and all class members.
In another recent case involving 7-Eleven, Bank of America agreed to pay $2.25 million earlier this year to resolve claims it charged multiple out-of-network fees at 7-Eleven ATMs.
Were you affected by the 7-Eleven data breach? Let us know in the comments.
Ellison is represented by Leanna A. Loginov of Shamis & Gentile P.A. and John J. Nelson of Milberg PLLC. Choplin is represented by Leanna A. Loginov of Shamis & Gentile P.A.
The 7-Eleven class action lawsuits are Choplin v. 7-Eleven Inc., Case No. 3:26-cv-01754, and Ellison v. 7-Eleven Inc., Case No. 3:26-cv-01755, both in the U.S. District Court for the Northern District of Texas.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
One thought on 7-Eleven class action lawsuits claim data breach exposed customer information
I was affected by this but it Ben so long ago that I loss all acess