← Shopify

2020 Insider breach — <200 merchants

2020 200 records affected Share on X

Data compromised

Payment card details, Card numbers, Payment information, Order details, Transaction history

Technical writeup

Two support team members illegally accessed customer transactional records. Contact info, order details. No payment card numbers. Terminated and referred to FBI.

Root cause

Insider threat; rogue support staff.

References