Back to incidents
Ransomware 8 August 2022
Ransomware – 7-Eleven Danmark
Company
7-Eleven Danmark
Sector
Retail
## Description
Ransomware hit 7-Eleven Denmark on the morning of 8 August 2022 and forced all 176 Danish stores to close. Ransom demand: 1,000,000 XMR (Monero). 7-Eleven refused to pay. Basic store operations recovered relatively quickly after the attack.
## Timeline
- 2022-08-08
Ransomware hits — all 176 stores forced to close
- 2022-08-09
5 stores reopen; ransom demand reported by Nordjyske (~$1M USD)
- 2022-08-10
7-Eleven publicly confirms ransomware attack and ransom demand
- 2022-08-11
7-Eleven publicly confirms refusal to pay
- 2022-08-26
Still partially affected — recovery ongoing
## References
- BleepingComputer — 7-Eleven stores in Denmark closed due to a cyberattack
- BleepingComputer — 7-Eleven Denmark confirms ransomware attack
- Computerworld — 7-Eleven ramt af kæmpe IT-nedbrud
- Computerworld — 7-Eleven nægter at betale ransomware til hackere
- TV2 — 7-Eleven ramt af omfattende hackerangreb
- DR — Ekspert om muligt hackerangreb mod 7-Eleven
- Nordjyske — Hacker til nordjysk 7-Eleven butik: send en million dollars
- Zetland
- Version2 — 7-Eleven stadig påvirket af ransomwareangreb