Shopify reports 'rogue' employees stole some customer data

Daniel Fowler
September 26, 2020

A crisis is brewing at Shopify Inc.

The Ottawa headquarters of Canadian e-commerce company Shopify are pictured on Wednesday, May 29, 2019.

Shopify said the breach was immediately contained by restricting access of those employees to the network and said less than 200 merchant stores were affected by this.

"We have subsequently provided information regarding the incident to the Office of the Privacy Commissioner".

We've seen all kinds of data breaches from outside hackers, and occasionally, as happened with Twitter, breaches that occurred as outsiders phished employeee credentials for access, but for Shopify, the threat came from inside.

Earlier Wednesday, the commissioner's office said it hadn't yet received a report about the breach.

Florida Governor Lifts Restrictions on Bars, Restaurants, and Stores
Restaurants can not be restricted further than 50% capacity, and local governments must justify it from an economic and health perspective.

Once the business became aware of the scheme the team members' access was immediately terminated, and an global investigation began with the assistance of the FBI and other agencies that will seek to find if, when, and where the data was used - if at all.

Shopify said that it does not have any evidence to suggest that the data was used, but that it had notified affected merchants of the incident.

Two "rogue" Shopify employees tried to steal transaction records from merchants and may have exposed customer data, the online payment platform said on Tuesday.

Shopify said it terminated the two employees' access to its network and the company is working with the Federal Bureau of Investigation (FBI) and other worldwide agencies that are investigating what it called "criminal acts".

While there's a hint on exploiting the accessed data yet, Shopify said the data accessed by those two employees were the "basic contact information such as email, name, and address, as well as order details, like products and services purchased".

Other reports by

Discuss This Article