Shopify

NJCCIC Data Breach Notification

Original Release Date: 9/28/2020

Summary

Shopify, the Canadian multi-national e-commerce company with locations in New York and San Francisco, reported a security breach caused by two rogue employees who accessed and attempted to obtain transaction details from Shopify shop merchants. The transaction data obtained may include basic contact information (name, address, email address) and order details (products and services purchased). The individuals did not have access to payment card numbers or other sensitive information. Approximately less than 200 shop merchants may be affected and Shopify plans to notify impacted merchants and customers. The individuals’ access was terminated immediately and the incident is currently under investigation.

New Jersey Cybersecurity & Communications Integration Cell

2 Schwarzkopf Dr, Ewing Township, NJ 08628

njccic@cyber.nj.gov

OUR COMMITMENT

The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.

Agency Seals of State of NJ, NJOHSP and NJCCIC

STAY CONNECTED:

View our Privacy Policy here.

View our Site Index here.