Threat Actor: Unknown | Unknown
Victim: Shopify | Shopify
Price: Not publicly listed
Exfiltrated Data Type: Personal and transactional information of Shopify users
Key Points :
- An individual claims to be selling a massive trove of data allegedly stolen from Shopify, a leading global e-commerce platform.
- The data includes personal and transactional information of nearly 180,000 Shopify users.
- The breach, which reportedly occurred in 2024, exposes sensitive customer information such as Shopify ID, first name, last name, email, mobile number, order count, total amount spent, email subscription status, email subscription date, SMS subscription status, and SMS subscription date.
In a cyber incident, an individual claims to be selling a massive trove of data allegedly stolen from Shopify, a leading global e-commerce platform. The data purportedly includes personal and transactional information of nearly 180,000 Shopify users.
The breach, which reportedly occurred in 2024, exposes sensitive customer information. The data set includes details such as Shopify ID, first name, last name, email, mobile number, order count, total amount spent, email subscription status, email subscription date, SMS subscription status, and SMS subscription date. The seller has provided a sample showing the format of the data, which comprises 179,873 rows of user information.
The seller has not publicly listed a price for the database and requests interested parties to contact them directly to negotiate the sale. This breach, if confirmed, represents a significant threat to the privacy and security of Shopify’s user base
Shopify, known for enabling entrepreneurs to start, manage, and grow their businesses, reported a revenue of $7.4 billion in its latest fiscal year.
The post Threat Actor Claims to Sell Database of Shopify, Including 180,000 Users appeared first on Daily Dark Web.