rewindex

ChangesGorgiasShopify checkout hijack campaign notice

Gorgias: Incident updated: Shopify checkout hijack campaign notice

Incident updateNormal progress (rule, 100%)Changed status.gorgias.com (opens in new tab)
Summary

Summary pending. The diff below shows exactly what changed.

Incident page: the full timeline of updates

What changed

Struck in red is what Gorgias removed; blue is what they added. Muted text is unchanged context.

ChangedStatus#1
Before: monitoring
After: resolved
AddedResolved time#2
Before: not present
After: 2026-10-27 15:33 UTC
AddedUpdateresolved#3
Before: not present
After: We consider this incident resolved, as we have no evidence that Gorgias has been affected. As part of our investigation, we: - Checked our storefront and checkout code (chat, self-service, Convert and our Shopify extension) for every known indicator of compromise. We found none. - Reviewed the last 30 days of infrastructure and CDN logs for the scripts we serve to storefronts and checkout. We found no sign of tampering or abuse. - Confirmed that the scripts we serve exactly match what our build pipeline produced. As a precaution, we're applying extra hardening measures and following Shopify's security recommendations for app partners. Our engineering team will continue to monitor the situation closely. We still recommend that store owners review the third-party apps installed on their store and follow Shopify's guidance for any app they're unsure about. If you see anything unusual related to Gorgias, contact us at support@gorgias.com.

Compared with the previous archived version of this incident (10 to 30-minute polling). View the live incident (opens in new tab).

Archive proof

Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

History of this incident

Tuesday, October 27

1 incident change

Thursday, October 22

1 incident change

Cite this

Incident updated: Shopify checkout hijack campaign notice on Gorgias’s status page, changed 2026-10-27 15:43 UTC (change 2 of 2).

Title
Incident updated: Shopify checkout hijack campaign notice
Vendor
Gorgias
Date
URL
https://rewindex.com/change/rc3c23892f5d2c8

All Gorgias changesGorgias profileMarkdownJSON