Shopify Details

Shopify

Ottawa, Canada • employees • Technology

Industry

Technology

Security Incidents

Shopify Inc., stylized as shopify, is a Canadian multinational e-commerce company headquartered in Ottawa, Ontario. Shopify is the name of its proprietary e-commerce platform for online stores and retail point-of-sale systems.

Security Incidents

Shopify Breach of Sep 2020

Severity Score

Moderate to Significant

Type

Insider Threat

Summary

In September 2020, Shopify experienced a security breach involving two rogue employees who accessed customer transaction records from several merchants on the platform. The internal threat actors were able to compromise the data of approximately 200 merchants, affecting potentially thousands of customers. The exposed information included customer contact details, order details, and in some cases, partial payment information. Shopify's security team quickly identified the breach, terminated the employees involved, and worked with law enforcement to investigate the incident. The company assured ...
Show more

Severity

The breach was severe as it involved insider threats within Shopify's support team who conducted a data breach scheme impacting less than 200 merchants. The incident raised questions about the security measures in place and how the breach was discovered, highlighting vulnerabilities within the company's internal systems.

Impact

The breach impacted approximately 200 merchants and their customers, leading to the unauthorized access and potential exposure of customer transactional data. Shopify took action by terminating the two rogue employees involved in the scheme and working with authorities to investigate the incident.