Shopify reports 'rogue' employees stole some customer data

Richard Lawler, @Rjcc 2h ago
Chris Wattie / Reuters

We’ve seen all kinds of data breaches from outside hackers, and occasionally, as happened with Twitter, breaches that occurred as outsiders phished employeee credentials for access, but for Shopify, the threat came from inside. The company’s software enables online shopping for other businesses, and in a blog post it revealed that two employees were caught “in a scheme to obtain customer transactional records of certain merchants.”

Shopify didn’t list the affected stores, but says it did inform them directly. Bloomberg reports that Pure, a cosmetics seller, notified customers of the breach, saying it occurred on September 15th. For now, you’ll probably have to keep an eye on your inbox, as it may not be obvious which sellers you interact with rely on the popular Shopify software kit.