Shopify Data Breach
In September 2020, e-commerce platform provider Shopify disclosed a security incident after two rogue support team members engaged in unauthorized access to merchant records.
Exposed Data Types
6- Customer names
- Email addresses
- Postal addresses
- Purchase histories
- Phone numbers
- Billing information
About This Breach
The individuals abused internal credentials to export transactional customer data and purchase histories from approximately 200 merchant storefronts, impacting an estimated 100,000 consumers. Exposed data included customer full names, delivery and postal addresses, email addresses, phone numbers, and purchased product specifics. Shopify terminated both employees immediately, revoked access, and engaged the FBI and Canadian law enforcement.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
