---
title: "CBcloud PickGo and 7NOW customer-data incident"
description: "Seven-Eleven Japan said unauthorized access to its delivery contractor CBcloud’s PickGo service exposed some 7NOW customer information."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-05"
canonical_url: "https://www.ally.security/incidents/cbcloud-pickgo-7now-customer-data-incident-2026"
markdown_url: "https://www.ally.security/incidents/cbcloud-pickgo-7now-customer-data-incident-2026.md"
stix_url: "https://www.ally.security/incidents/cbcloud-pickgo-7now-customer-data-incident-2026/stix.json"
---

# CBcloud PickGo and 7NOW customer-data incident

Seven-Eleven Japan said unauthorized access to its delivery contractor CBcloud’s PickGo service exposed some 7NOW customer information.

Last modified Nov 5, 2026 · 1 source

## Summary

- **Environment:** PickGo delivery processing for 7NOW
- **Operational impact:** Customer delivery records obtained; 7NOW remained operational
- **Financial impact:** No incident cost publicly quantified

## What happened

[Seven-Eleven Japan](https://www.sej.co.jp/) said unauthorized access to its delivery contractor [CBcloud](https://cb-cloud.com/)’s PickGo service exposed some 7NOW customer information. [1](#source-1)

## Impact

The notice lists 164,180 records with kana names, 4,762 with names and addresses, and 209 with those fields plus phone numbers and postal codes. Some order details were also obtained. [1](#source-1)

Seven-Eleven Japan said card information, IDs and passwords were not exposed, and 7NOW continued operating normally. [1](#source-1)

## Timeline

### November 1, 2026 — CBcloud identified unauthorized access

CBcloud identified unauthorized access, as described in the [incident notice](https://www.sej.co.jp/company/important/185116.html). [1](#source-1)

### November 3, 2026 — 7NOW data acquisition confirmed and disclosed

7NOW data acquisition confirmed and disclosed, as described in the [incident notice](https://www.sej.co.jp/company/important/185116.html). [1](#source-1)

### November 5, 2026 — Briefing updated

This briefing was last reviewed and updated on November 5, 2026.

## Threat Group & Attack Vector

The reviewed notice does not establish the initial access method.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

CBcloud identified unauthorized access November 1 and confirmed 7NOW data acquisition November 3. It blocked connections, suspended abused accounts and fixed the exploited defect. [1](#source-1)

The incident was reported to Japan’s [Personal Information Protection Commission](https://www.ppc.go.jp/en/), and affected customers were to receive SMS notices. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/cbcloud-pickgo-7now-customer-data-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### 7NOW customer-information notice following unauthorized access at CBcloud

official · Seven-Eleven Japan · Nov 3, 2026

<https://www.sej.co.jp/company/important/185116.html>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: Seven-Eleven Japan said card information, IDs and passwords were not exposed, and 7NOW continued operating normally.
2. **Resulted In · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: The incident was reported to Japan’s Personal Information Protection Commission, and affected customers were to receive SMS notices.
3. **Vendor Of · 100% confidence · current**  
   CBcloud: Seven-Eleven Japan
4. **Affected Organization · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: Seven-Eleven Japan
5. **Occurred At · 100% confidence · current**  
   CBcloud identified unauthorized access: 2026-11-01
6. **Resulted In · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: 7NOW data acquisition confirmed and disclosed
7. **Affected Organization · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: CBcloud
8. **Resulted In · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: CBcloud identified unauthorized access November 1 and confirmed 7NOW data acquisition November 3. It blocked connections, suspended abused accounts and fixed the exploited defect.
9. **Resulted In · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: The notice lists 164,180 records with kana names, 4,762 with names and addresses, and 209 with those fields plus phone numbers and postal codes. Some order details were also obtained.
10. **Resulted In · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: CBcloud identified unauthorized access
11. **Disclosed At · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: 2026-11-03
12. **Resulted In · 100% confidence · current**  
   CBcloud PickGo and 7NOW customer-data incident: Seven-Eleven Japan said unauthorized access to its delivery contractor CBcloud’s PickGo service exposed some 7NOW customer information.
13. **Occurred At · 100% confidence · current**  
   7NOW data acquisition confirmed and disclosed: 2026-11-03

</details>