Is my shopify being hacked?

Shopify Discussion

Topic summary

Suspicious logins attributed to “California Google Cloud” appear in a store owner’s login history despite being in Europe, using two‑step authentication (2FA), and resetting the password twice since Monday.

Key possibilities and checks:

  • Ensure 2FA (e.g., Google Authenticator) is active for all users with access; confirm no collaborators were granted access.
  • Verify no VPN or proxy is in use that could route traffic through US infrastructure, causing location anomalies.
  • “Google Cloud” in logs may reflect infrastructure or security services rather than a direct user login.

Related platform issues reported:

  • Multiple 2FA methods failing (SMS codes not delivered since Tuesday; fingerprint 2FA worked briefly, then stopped).
  • Support advised waiting 24 hours twice; Shopify Status still shows “all systems operational,” raising concerns about broader authentication problems.

Actions taken:

  • Password resets by the store owner; screenshot of user settings shared.
  • Another user contacted support and switched 2FA methods.

Status:

  • No confirmed hack or resolution yet. The cause of the California login entries remains unclear; potential platform-side authentication anomalies are suspected. The shared screenshot appears central to diagnosing the issue.
Summarized with AI on December 28. AI used: gpt-5.
1

Hi, can someone tell me if Im being hacked?

I have Two-step authentication, I have reset my password 2 times since Monday, and I still see a login from California Google Cloud, even tho Im located in Europe.

So confused since I have tried resetting my password so many times.

2

@Fanmini thanks for posting here.

Don’t worry if you have activated :check_mark: google authentication app. :blush:

but if you give permission to someone to your store, request they also activate it.

3

Thanks for the reply.

I have not given anyone access, but do you know why it happens?

4

@Fanmini any VPN or proxy in your use on laptop or mobile.

can you please share ss of user area in shopify settings.

5

There is something terribly wrong with Shopify. I don’t think your store is hacked, but Shopify itself might be. I had 2-step verification set up with SMS for delivery of verification code, and it hasn’t been working since Tuesday. Contacted Support, and was told to wait for 24 hours to see if it “resolves on its own.” Needless to say, it didn’t and all they could tell me the second time around is to wait another 24 hours. I went and set up the verification by fingerprint from two different devices (main and secondary). It worked for about an hour, and then stopped working. Of course, Shopify Status shows “all systems operational,” and nobody knows what’s going on. It’s disgraceful how much support on this platform has deteriorated in the past 2-3 years.

6

Im not using any VPN.

Do you mean this?

Fanmini_0-1717062736985.png
Fanmini_0-1717062736985.png706Ă—400 27.4 KB

1 Like