Skip to content

Incident detail

Shopify checkout hijack campaign notice

Active incidentMinor

Timeline window

Started

Get alerted the next time Gorgias breaks

Free email alerts for the handful of vendors you cannot afford to miss. No card, live in about a minute. Paid plans add Slack, Teams, Discord, and webhook delivery across your whole stack, plus higher API quotas.

Timeline

Incident updates

Every update on the official status source, oldest to newest, exactly as it appeared there.

  1. Investigating

    We’re aware of a campaign targeting third-party apps on Shopify stores, where malicious code can be delivered to shoppers’ browsers through compromised app providers.

    After an initial investigation, we can confirm we have no evidence that Gorgias is affected. Our engineering team is actively monitoring the situation, and we are verifying the integrity of the scripts we serve to your storefront.

    We’ll send an update as soon as we have more information. In the meantime, we recommend reviewing the third-party apps installed on your store and checking Shopify’s guidance for any app you’re unsure about.

    If you see anything unusual related to Gorgias, contact us at support@gorgias.com.

  2. Monitoring

    Our engineering team continues to investigate the Shopify third-party app security campaign.

    At this point, we have no evidence that Gorgias has been affected. We are continuing to verify the integrity of our storefront scripts and monitor incoming customer reports.

    We will continue providing updates as our investigation progresses. If you notice any suspicious behavior related to Gorgias, please contact support@gorgias.com

Keep exploring

More from Gorgias

Neighboring incidents on Gorgias's timeline and the rest of their record on OutageDeck.