OTTAWA — Shopify Inc. says it has fired two “rogue” employees involved in a scheme to illegitimately obtain records connected to some of its merchants.
Company spokeswoman Rebecca Feigelsohn confirmed the terminations in an email to The Canadian Press Tuesday, a day after the Ottawa-based company first revealed the data breach.
Shopify says in the post that it terminated the employees’ access to its network, referred the incident to law enforcement and will work with the FBI to investigate further.
The customer data the employees were accessing was linked to fewer than 200 merchants, who Shopify has declined to identify but says have been notified.
The improperly accessed data includes basic contact information, such as emails, names and addresses, as well as order details, like what products and services were purchased.
Shopify says complete payment card numbers and other sensitive personal or financial information were not part of the incident and it has yet to find evidence that any of the data was used.
This report by The Canadian Press was first published September 23, 2020.
