Shopify says it has fired two “rogue” employees involved in a scheme to illegitimately obtain records connected to some of its merchants.
Company spokeswoman Rebecca Feigelsohn confirmed the terminations in an email to The Canadian Press Tuesday, a day after the Ottawa-based company first revealed the data breach.
The Ottawa-based tech firm says it terminated the employees’ access to its network and referred the data breach to law enforcement.
OBJ360 (Sponsored)
Adapting to hybrid Work: How IAV Is simplifying office technology with BYOD solutions
You may have heard of BYOB, but have you heard of BYOD? BYOD, also known as “Bring your own device” is becoming a common practice for companies following hybrid work
93 Norman offers convenience, comfort, and community in Ottawa
With easy access to some of Ottawa’s best restaurants, miles of bike paths and a modern, brand-new living space, Taggart Realty Management is adding to the city’s rental accommodation inventory
Shopify says it doesn’t have evidence at this point in the investigation that the data was used.
It says fewer than 200 merchants whose stores were illegitimately accessed are at risk of having had their customer data exposed. This data includes basic contact information, such as email, name and address, as well as order details, like products and services purchased.
Complete payment card numbers or other sensitive personal or financial information were not involved.
Shopify, which is Canada’s most valuable company, says the incident was not the result of a technical vulnerability in its platform, and emphasized that the vast majority its customers are not affected.
“We don’t take these events lightly at Shopify. We have zero tolerance for platform abuse and will take action to preserve the confidence of our community and the integrity of our product,” it said in a company message board.
“To put it simply, we are committed to protecting our platform, our merchants, and their customers. We will continue to work hard to earn your trust every day.”
