Shopify Denies Data Breach Claims

Major e-commerce platform Shopify has announced that none of its systems were breached following accusations that the e-commerce giant’s data was stolen as part of Operation 888, BleepingComputer reports.

The company noted that data purportedly from Shopify, including individuals’ names, Shopify IDs, email addresses, email subscription dates, mobile phone numbers, SMS subscription, number of orders, and total spend, was stolen from a third-party app.

“Shopify’s systems did not experience a security incident. The reported data loss was caused by a third-party app. The app developer intends to notify affected customers,” the company said, which did not provide additional details about the compromised third-party app.

Shopify’s disclosure comes nearly four years after nearly 200 of its merchants’ customer transaction records were breached by rogue support team members. Meanwhile, other organizations whose data was stolen or leaked by 888 include Unicef, Credit Suisse, Shell, Heineken, and Accenture India.