Receiving hundreds of customers/redact webhooks suddenly with no email or orders_to_redact

Shopify Apps

Topic summary

A sudden surge of customers/redact webhook requests began last week, with some merchants receiving hundreds of these notifications.

Key anomalies:

  • Requests contain no associated email addresses or orders_to_redact data
  • Only includes basic fields: customer_id, shop_id, and shop_domain
  • Phone and email fields show as “None”

Context:
Normally, these GDPR-related redaction webhooks include customer email addresses or linked orders, but the recent batch lacks this identifying information. The poster is questioning whether Shopify changed how these webhook requests are structured or triggered, as the pattern represents a significant departure from typical behavior.

Summarized with AI on November 19. AI used: claude-sonnet-4-5-20250929.
1

I’m wondering if something changed with how customers/redact requests are being sent?

We usually receive them with related orders or an email, but these requests started coming in last week, with some in the hundreds per merchant and all at or around the same time.

Example:

{
  "shop_id": "<shop_id>",
  "shop_domain": "<shop-name>.myshopify.com",
  "customer": {
    "id": "<customer_id>",
    "email": "None",
    "phone": "None"
  },
  "orders_to_redact": []
}