As the Federal Bureau of Investigation and the Royal Canadian Mounted Police, Shopify has suffered breach that has affected approximately 200 merchants.
As the e-commerce company stated, the data breach was carried out by two malicious members of a support team, who allegedly “participated in a scheme to obtain customer transaction records of certain merchants.”
Shopify said in a statement on the company's forum that after an investigation, it terminated the two support team members' access to its network and "referred the incident to law enforcement."
"We are currently working with the FBI and other international agencies to investigate these criminal acts. While we have no evidence that data was used, we are in the early stages of the investigation and will update interested merchants on our findings," Shopify said.
The company added that the breach on its site was not the result of a bug or technical issue and that “the vast majority of merchants using Shopify are not affected.” As of October 2019, one million merchants use Shopify’s platform.
However, the company said that customer data associated with these merchants could have been exposed. This data includes contact information such as emails and names, addresses, order details, and products and services purchased.
"Full payment card numbers or other sensitive personal or financial information were not part of this breach," Shopify said.
A spokesperson for Shopify Canada said in an email that all affected merchants have been notified, but did not provide information on how many of them are from Canada. The spokesperson also did not specify when the company became aware of the breach.
