Shopify Says ‘Rogue’ Employees Breached Merchant Data

Shopify  (SHOP) – Get Report said that data from fewer than 200 merchants were likely exposed after two employees tried to steal customer-transaction records. 

The Ottawa company said that two “rogue members” of its support team planned to obtain the records from certain merchants. Upon learning of the plan, Shopify says it immediately terminated the employees’ access to its network. 

The company said the breach did not result from a technical vulnerability on its platform.

The data include contact info like emails, names and addresses as well as order details and services purchased. 

The company says that it is working with the Federal Bureau of Investigation and other international agencies in the investigation.

Shopify also says that while there is no evidence of the stolen data having been utilized, the investigation is still in its early stages. 

“Our teams have been in close communication with affected merchants to help them navigate this issue and address any of their concerns,” the company said in a statement. … 

Source Article