Shopify has confirmed a data breach, in which two “rogue members” of its support team stole customer data from at least 100 merchants.
In a blog post, the online shopping site said that its investigation so far showed that the two employees, who have since been fired, were “engaged in a scheme to obtain customer transactional records of certain merchants.”
Shopify said it had referred the matter to the FBI.
The employees allegedly stole customer data, including names, postal addresses and order details, from “less than 200 merchants,” but financial data was unaffected.
Shopify said that it does not have any evidence to suggest that the data was used, but that it had notified affected merchants of the incident.