No impact incident

Gorgias: Shopify checkout hijack campaign notice

Current status of Gorgias: Operational — live Gorgias status

Timeline

1. Oct 22, 2026, 12:19 UTC
   investigating
   We’re aware of a campaign targeting third-party apps on Shopify stores, where malicious code can be delivered to shoppers’ browsers through compromised app providers. After an initial investigation, we can confirm we have no evidence that Gorgias is affected. Our engineering team is actively monitoring the situation, and we are verifying the integrity of the scripts we serve to your storefront. We’ll send an update as soon as we have more information. In the meantime, we recommend reviewing the third-party apps installed on your store and checking Shopify’s guidance for any app you’re unsure about. If you see anything unusual related to Gorgias, contact us at [email protected].
2. Oct 22, 2026, 20:58 UTC
   monitoring
   Our engineering team continues to investigate the Shopify third-party app security campaign. At this point, we have no evidence that Gorgias has been affected. We are continuing to verify the integrity of our storefront scripts and monitor incoming customer reports. We will continue providing updates as our investigation progresses. If you notice any suspicious behavior related to Gorgias, please contact [email protected]

Updates as published by Gorgias (original).