A threat actor posted the details of nearly 180,000 customers to a hacking forum last week, but Shopify points the finger at a third party.
E-commerce giant Shopify has denied it has been hacked following the leak of nearly 180,000 customer details on a popular clear web hacking forum.
“Shopify systems have not experienced a security incident,” Shopify said in a statement to multiple media outlets. “The data loss reported was caused by a third-party app. The app developer intends to notify affected customers.”
Shopify declined to confirm the number of customers impacted or which particular third-party app was involved.
The data leak was made by a threat actor named 888 on 3 July. The threat actor claimed to have 173,873 sets of user information, including Shopify ID, first name, last name, email, mobile, trader count, total spent, email subscription, email subscription date, SMS subscription, and SMS subscription date.
The threat actor also shared a small sample of the data. The data was offered as a one-time sale, and anyone interested was told to contact 888 via personal message on the forum to make an offer in the Monero cryptocurrency, which is popular for such criminal transactions.
🔒 Shopify denies data breach claims, attributing stolen customer data to a third-party app issue. Affected customers will be notified by the app developer. #Shopify #DataSecurity #CyberSecurityhttps://t.co/J0KNlg9eKQ
— Cyber News Live (@cybernewslive) July 7, 2024
The threat actor has posted dozens of allegedly leaked data sets in 2024 alone, including ones claiming to be from Credit Suisse, Assurified, and Heineken. Last month, the threat actor claimed responsibility for a data breach affecting 32,000 Accenture employees. However, the company confirmed the next day that it had found only three employee emails.
In light of this incident, users should remain vigilant and monitor their accounts for any suspicious activity.
Start Growing with Cloudways Today.
Our Clients Love us because we never compromise on these
Abdul Rehman
Abdul is a tech-savvy, coffee-fueled, and creatively driven marketer who loves keeping up with the latest software updates and tech gadgets. He’s also a skilled technical writer who can explain complex concepts simply for a broad audience. Abdul enjoys sharing his knowledge of the Cloud industry through user manuals, documentation, and blog posts.