# Gorgias: Incident updated: Shopify checkout hijack campaign notice

> Incident updated: Shopify checkout hijack campaign notice. Detected 2026-10-27 by Rewindex: what changed on Gorgias’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/rc3c23892f5d2c8
Last updated: 2026-10-27T15:43:59Z

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-27 15:43 UTC · Detected: 2026-10-27 15:43 UTC
- [Source: https://status.gorgias.com/incidents/mp1pwnkq4nmy](https://status.gorgias.com/incidents/mp1pwnkq4nmy)
- [Company: Gorgias](https://rewindex.com/company/gorgias.md)
- Versions: before incident\_version:329/mp1pwnkq4nmy@266e2ac7d698 → after incident\_version:329/mp1pwnkq4nmy@3736f1ca59b3
- Change 2 of 2 for this incident

Incident page (full timeline): [Shopify checkout hijack campaign notice](https://rewindex.com/company/gorgias/incidents/mp1pwnkq4nmy.md)
## What changed

**1. Changed: Status**

```diff
- monitoring
+ resolved
```

**2. Added: Resolved time**

```diff
+ 2026-10-27 15:33 UTC
```

**3. Added: Update** (resolved) · 2026-10-27 15:33 UTC

```diff
+ We consider this incident resolved, as we have no evidence that Gorgias has been affected. As part of our investigation, we: - Checked our storefront and checkout code (chat, self-service, Convert and our Shopify extension) for every known indicator of compromise. We found none. - Reviewed the last 30 days of infrastructure and CDN logs for the scripts we serve to storefronts and checkout. We found no sign of tampering or abuse. - Confirmed that the scripts we serve exactly match what our build pipeline produced. As a precaution, we're applying extra hardening measures and following Shopify's security recommendations for app partners. Our engineering team will continue to monitor the situation closely. We still recommend that store owners review the third-party apps installed on their store and follow Shopify's guidance for any app they're unsure about. If you see anything unusual related to Gorgias, contact us at support@gorgias.com.
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-22 21:03 UTC | [Incident updated: Shopify checkout hijack campaign notice](https://rewindex.com/change/rd94f5fb8f945e8.md) | Normal progress |
| 2026-10-27 15:43 UTC | Incident updated: Shopify checkout hijack campaign notice (this change) | Normal progress |

Previous: [change](https://rewindex.com/change/rd94f5fb8f945e8.md) · All Gorgias changes: [timeline](https://rewindex.com/company/gorgias/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Incident updated: Shopify checkout hijack campaign notice on Gorgias’s status page, changed 2026-10-27 15:43 UTC (change 2 of 2).

- Canonical URL: https://rewindex.com/change/rc3c23892f5d2c8
- Citation: Gorgias, “Incident updated: Shopify checkout hijack campaign notice” (2026-10-27 15:43 UTC). Archived by Rewindex: https://rewindex.com/change/rc3c23892f5d2c8 (CC BY 4.0).
- Markdown link: `[Gorgias: Incident updated: Shopify checkout hijack campaign notice (2026-10-27)](https://rewindex.com/change/rc3c23892f5d2c8)`


---
Canonical: https://rewindex.com/change/rc3c23892f5d2c8 · Markdown: https://rewindex.com/change/rc3c23892f5d2c8.md · JSON: https://rewindex.com/api/v1/changes/rc3c23892f5d2c8 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T17:40:45.991Z