2024 Third-party app breach — 180k rows
Data compromised
Email addresses, Names, Phone numbers
Technical writeup
Threat actor sold customer data; Shopify blamed third-party app. IDs, names, emails, phones, subscription details. Possibly linked to Saara plugin exposed database.
Root cause
Third-party app breach; Shopify platform not breached.