Last week, a cybercriminal announced on a hacking forum that he was selling data stolen from Shopify, but the e-commerce platform denies that it suffered a data breach. The attacker claims to be selling customer data stolen from the company's network.
“Shopify’s systems did not experience a security,” Shopify told BleepingComputer.
The company explained that the data loss, reported by the attacker, was caused by a third-party app. Shopify was not compromised. The app developer plans to notify affected customers.
See also: Airtel denies data breach
Five days ago, a threat actor named “ 888 ” began selling data that allegedly came from a Shopify data breach in 2024. The attacker even shared sample data to lend more credibility to his claims. The data includes a person’s Shopify ID, first name, last name, email, mobile number, number of orders, total spend, email subscription, email signup date , SMS subscription, and SMS subscription date.
Shopify did not provide further information about the third application that was compromised and allowed this data to be leaked.
The 888 attacker has also sold/leaked other data allegedly linked to Credit Suisse, Shell, Heineken, Accenture India, and Unicef.
See also: Roll20 – Data Breach: Player Details Exposed
If the hacker 's allegations prove true, Shopify could face serious legal consequences . Customers affected by the data breach could take legal action against the company, seeking damages for the breach of their privacy and potential financial losses they suffered.
A data breach could negatively impact Shopify's reputation. The company's customers and partners may lose trust in Shopify's ability to protect data , leading to customer loss and reduced revenue.
Furthermore, Shopify could suffer financial losses not only from legal damages but also from the need to invest in security to its systems.
See also: HealthEquity: Customer health data breach
Finally, a data breach could lead to increased scrutiny from regulators .Shopify could face fines and penalties from government agencies that oversee data protection.
Source: www.bleepingcomputer.com
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
