.svg)
On October 13, Selleasy was a victim of a deliberate, planned cyber-attack. Based on the information that we currently have, despite having robust security safeguards in place, it appears that an unauthorized script was injected into some of the stores we serve, which redirected customers to a phishing page outside our environment. So far, we have not found any evidence of a data breach or leak on the Selleasy backend or database. We take such incidents very seriously and our utmost priority is to secure our merchants and their customers. Here’s what we’ve done since we became aware of the incident:
- We fixed the root cause within hours and cleaned up the malicious script keeping the impact time minimal. The unauthorized actions of the attackers were totally shut down once we came to know of the incident and we have bolstered our internal security protocols and configuration controls.
- We proactively reported the incident to Shopify, which has confirmed the malicious code has been removed on the same day.
- We have engaged an independent third-party security agency for an end-to-end audit and investigation.
- We have notified the relevant local authorities, as required by applicable law.
- We have contacted all affected merchants and shared our initial findings with them, and we continue to work with them.
Our team is working around the clock on the investigation.
Based on our current investigation, Selleasy is safe to use. We have added further security measures and are continuously monitoring for any anomalies.
Thank you to our merchants, partners, and the Shopify community for the trust and support during this difficult time. In case of any query, merchants can reach us at communication@logbase.io
.svg)
.svg)
.svg)
.svg)