BreachesMar 18, 2026
‼️🇨🇦 A threat actor is auctioning Shopify API access to a Canadian e-commerce store processing...
A threat actor is publicly auctioning Shopify API credentials for a Canadian e-commerce store processing ~1,213 weekly orders, with a starting bid of $5,000. The listing includes full API privileges, exposing potential access to sensitive customer data, order information, and store operations.
Summary
A threat actor is publicly auctioning Shopify API credentials for a Canadian e-commerce store processing ~1,213 weekly orders, with a starting bid of $5,000. The listing includes full API privileges, exposing potential access to sensitive customer data, order information, and store operations.
Indicators of Compromise
- malware — Shopify API credential theft