Are we hacked? How can we solve this?

[lvansteen]

It looks like someone hacked us and is asking our customers to update their payment information.
It's a pop-up that is showing up when browsing through our products.

We've already had customers contacting us that they filled it out, and had to block their card.

How can we solve this? and how can we prevent this?

[Guleria]

Hello @lvansteen ,

Only store owner or staff account or collaboration account or app's who have permission of store can make changes. 
There is no other way to add a popup in your store and display such message in popup.

To solve it, Inspect the source code and find it's origin and once found remove/comment it.

Thanks

[Don]

Hi there @lvansteen!

Don here from Shopify.

Thanks for letting us know about this!

Could you share a link to your store with us here and any info you have on how to trigger this behaviour?

You can check out some info here on our help site on account security generally and you can see how to activate two-factor authentication here for more security.

Would you have gotten an email out from Shopify at any point about a new login or any sort of security notification?

The more info and context you can share here, the better we'll be able to investigate together. 

Regards,

Don