Incident Update

Highlighted
Shopify Staff
Shopify Staff
10 0 5

@jcmediahouse wrote:

I'm terribly worried and concerned about this incident


Hi @jcmediahouse

Since becoming aware of the incident, Shopify has conducted a thorough investigation of the incident, immediately suspended the individuals’ access to our network, notified law enforcement, and engaged a third party digital forensics firm to conduct an independent investigation. Merchant trust and data security remain a top priority at Shopify, and we are committed to protecting our platform, our merchants, and their customers. Thanks!

0 Likes
Highlighted
New Member
2 0 3

I just had 2 cancel my credit card. I was one of those customers. Received an email from the online store and had 2 fraudulent charges on my credit card.

I am really concern about identity theft. Who should I contact about that?

0 Likes
Highlighted
New Member
2 0 3

Same store to me Thrive cosmetics.... 

2 credit card fraud charges. So YES they had the cc info somehow

Highlighted
Tourist
4 0 4

Shopify won't do anything but tell you "idenity theft was impossible". contact your bank, cancel the cards and get the charges removed thats all you can do.

New Member
2 0 0

Is the reason you can't ID merchants due to contractual privacy issues with them? I'm writing a blog post about this and I want to be accurate. Thanks!!!

0 Likes
Highlighted
New Member
2 0 2
@jasmd25 and @Nem360 - the only Shopify store I used was Thrive Cosmetics and I am also a victim of fraud here. 

Originally it was fraud on one card I used to purchase items from Thrive, so I cancelled the card. Then, i switched to another card to buy more on Thrive and then that card got fraud on it as well. None of my other cards have fraud on them and the two impacted cards are from different banking institutions. So the likelihood that this is related here goes up in my book. 
 
 I recognize Shopify’s position that no credit card data was stolen, the fact that the only two cards I used on Shopify both had fraud before the time of this incident is too much of a coincidence to ignore. 
 
Often, what companies originally uncover in terms of a data breach turns out to be greater than originally thought. 
 
Shopify’s post mentions this incident has been reported to authorities. I would like the fraud on my credit cards reported to those same authorities and internally to Shopify management as this could indeed be a case where there is more than meets the eye. 

Posts about this from three separate users purchasing from the same Shopify store is more than just a coincidence. 
Highlighted
New Member
2 0 0
I don’t understand. If the fraud occurred before the incident then how can it be related to this breach?
0 Likes
Highlighted
Tourist
4 0 4

The fraud accured before they announced it not before it happened.  It takes companies sometimes days before they realize then they make the decision on whether or not to report it.  In my case I can still see every dang charge these guys try on my now dead card.  Last charge was Friday they attempted 4 LYFT charges.  I tried contacting LYFT NOTHING! I just informes my bank, it's crazy how stealing a cars or identity theft is looked at like not even a big deal now a day.

 

Highlighted
Explorer
63 11 13

Shopify, thank you for making (us) members aware of this incident, keeping us updated and reporting it to authorities. Hope the investigation goes well. Keep up the good work!

 

0 Likes
Highlighted
New Member
2 0 2

@Nem360 is spot on. If you read the memo from Shopify closely, this is an internal breach where employees accessed personal data of customers. We are being notified after those employees were terminated and reported to authorities. 

In my opinion, Shopify has an ethical obligation to pursue complaints from customers regarding potentially related fraud and also ensure it is reported to those same authorities which Shopify originally reported the incident to. Otherwise, law enforcement would not know true true extent of the issue and the bad actors in this case could get off the hook for crimes that went unreported. 

0 Likes