# Gorgias: Incident updated: Shopify checkout hijack campaign notice

> Incident updated: Shopify checkout hijack campaign notice. Detected 2026-10-22 by Rewindex: what changed on Gorgias’s status page, with the before/after diff.

Canonical: https://rewindex.com/change/rd94f5fb8f945e8
Last updated: 2026-10-22T21:03:59Z

**Summary:** _summary pending_
- Kind: Incident update · Label: Normal progress (rule)
- Changed: 2026-10-22 21:03 UTC · Detected: 2026-10-22 21:03 UTC
- [Source: https://status.gorgias.com/incidents/mp1pwnkq4nmy](https://status.gorgias.com/incidents/mp1pwnkq4nmy)
- [Company: Gorgias](https://rewindex.com/company/gorgias.md)
- Versions: before incident\_version:329/mp1pwnkq4nmy@25bb71304f2f → after incident\_version:329/mp1pwnkq4nmy@266e2ac7d698
- Change 1 of 2 for this incident

Incident page (full timeline): [Shopify checkout hijack campaign notice](https://rewindex.com/company/gorgias/incidents/mp1pwnkq4nmy.md)
## What changed

**1. Changed: Status**

```diff
- investigating
+ monitoring
```

**2. Added: Update** (monitoring) · 2026-10-22 20:58 UTC

```diff
+ Our engineering team continues to investigate the Shopify third-party app security campaign. At this point, we have no evidence that Gorgias has been affected. We are continuing to verify the integrity of our storefront scripts and monitor incoming customer reports. We will continue providing updates as our investigation progresses. If you notice any suspicious behavior related to Gorgias, please contact support@gorgias.com
```

## History of this incident

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-22 21:03 UTC | Incident updated: Shopify checkout hijack campaign notice (this change) | Normal progress |
| 2026-10-27 15:43 UTC | [Incident updated: Shopify checkout hijack campaign notice](https://rewindex.com/change/rc3c23892f5d2c8.md) | Normal progress |

Next: [change](https://rewindex.com/change/rc3c23892f5d2c8.md) · All Gorgias changes: [timeline](https://rewindex.com/company/gorgias/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Incident updated: Shopify checkout hijack campaign notice on Gorgias’s status page, changed 2026-10-22 21:03 UTC (change 1 of 2).

- Canonical URL: https://rewindex.com/change/rd94f5fb8f945e8
- Citation: Gorgias, “Incident updated: Shopify checkout hijack campaign notice” (2026-10-22 21:03 UTC). Archived by Rewindex: https://rewindex.com/change/rd94f5fb8f945e8 (CC BY 4.0).
- Markdown link: `[Gorgias: Incident updated: Shopify checkout hijack campaign notice (2026-10-22)](https://rewindex.com/change/rd94f5fb8f945e8)`


---
Canonical: https://rewindex.com/change/rd94f5fb8f945e8 · Markdown: https://rewindex.com/change/rd94f5fb8f945e8.md · JSON: https://rewindex.com/api/v1/changes/rd94f5fb8f945e8 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T17:40:47.301Z