Canadian e-commerce company Shopify has announced a data breach affecting less than 200 of their customers. In a blog post entitled “Incident Update,” Shopify reveals that the breach was caused by two rouge members of their support team. Apparently, they were conducting a scheme to rip off customers by grabbing their transaction records.
Shopify has responded to this insider threat by terminating both employees. They are currently working with the FBI and local police to investigate the issue further. “While we do not have evidence of the data being utilized,” the incident update states. “We are in the early stages of the investigation and will be updating affected merchants as relevant.”
The information affected in the breach includes names, postal addresses, emails, and item purchase details. However, complete credit card payment numbers and other financial information were not jeopardized.