Shopify Security in the AI Era: The Threats Hitting Store Owners in 2026
The app hijack step by step, AI-written phishing, cloned storefronts, bots and AI agents, and leaked API tokens.
Read →Special Report • Updated November 2026
Shopify Security in the AI Era: The App Hijack and How to Keep Your Store Safe
In October 2026, shoppers on several Shopify stores were sent to fake checkout pages through apps the merchants had installed. Here is the full picture: the AI-era threats, what Shopify already protects, the technologies worth understanding, and how Navi+ is designed to limit risk.
Oct 10, 2026
Checkout hijack through app settings first reported
romanzipp.com
3 apps
Unavailable in the App Store by Oct 16
iTnews
5,714
Fake stores cloning scraped Shopify catalogs
Sansec, June 2026
$200,000
Maximum Shopify bug bounty
shopify.com/bugbounty
Concept illustration: a protected store, and an attacker diverting payments through a plug-in app.
What happened in October 2026
Shopify was not hacked and the stores were not hacked. The attacker went through app vendors' systems.
- Jul–Aug 2026 — Security firm cside links earlier incidents to the same pattern: code injected into app settings fields after vendor credentials were compromised.
- Oct 10 — Developer Roman Zipp finds a store's checkout button sending shoppers to a look-alike domain, traced to the Hulk Product Options app. The app file on Shopify's CDN is clean; the code comes from the vendor's settings API.
- Oct 13–15 — Selleasy's developer confirms an internal tool was accessed; Swym Wishlist Plus is also reported.
- Oct 16 — All three listings are unavailable in the App Store. An Australian merchant says Shopify asked it to stay closed; it reopens by Oct 19.
- Oct 20 & 23 — Shopify adds a warning before storefronts send shoppers to outside sites, then narrows it to block known-malicious sites and confirm suspicious ones.
- Still unknown — No total number of affected stores or shoppers has been published.
What Shopify covers vs. what is still on you
Most real incidents happen in the right-hand column.
| Area | Shopify protects | Who acts | Your job |
|---|---|---|---|
| Checkout & payments | checkout.liquid retired, sandboxed pixels, 3D Secure (EEA), Shopify Protect (US) | Shopify | Remove old checkout scripts |
| Staff logins | 2-step authentication, passkeys, security keys | Shared | Turn them on, remove old accounts |
| Apps | Token exchange, scopes, customer-data rules, privacy webhooks | Shared | Choose vendors, remove unused apps |
| Storefront scripts | App embeds, redirect warning (Oct 2026) | You | Know what runs on your pages |
| API tokens | Short-lived tokens for public apps | You | Protect custom-app and agency tokens |
The 4-part security series
Every number in the series links to a source you can open.
What Shopify Already Does to Protect Your Store
Passkeys, token exchange, protected customer data, sandboxed pixels, retired checkout.liquid, redirect warnings and Shopify Protect.
Read →Passkeys, Sandboxes, CSP, SRI: The Technologies Explained
What each technology stops, and where it stops. Including why SRI would not have caught the October attack.
Read →How Navi+ Is Built to Limit Risk on Your Store
Read-only permissions, no checkout access, no theme edits, static menu files, and the honest limits.
Read →How Navi+ is designed to limit risk
A menu app has no reason to touch orders, customers or checkout. Navi+ asks only for what navigation needs:
- Read-only permissions: themes, products, navigation and content. No theme write access, no orders, no customers.
- Never on checkout: no checkout extension and no web pixel.
- No theme edits: loads through an app embed you can switch off instantly.
- Shoppers never call Navi+ servers: menus are static files on a CDN; if the script fails, the menu hides and the store keeps running.
The honest limit: menus can contain custom HTML, and menu files are served by the vendor. These design choices narrow the risk; they do not make it zero.
Read the details
See the Navi+ Tab Bar
5 things to do this week
- Audit your apps in Settings → Apps and sales channels. Remove unused apps and read each app's access list.
- Test your checkout path in a private window. The address bar should stay on your domain or Shopify's checkout.
- Require passkeys or security keys for every staff account; remove people who no longer need access.
- Rotate Admin API tokens that were ever pasted into code, documents or AI chats.
- Check App embeds in the theme editor so you know exactly which apps run code on your storefront.
Frequently asked questions
Was Shopify hacked in October 2026?
No public report says so. The malicious code was served through the settings systems of specific app vendors. Shopify removed the affected listings and added redirect protection to storefronts.
How do I know if my store was affected?
Check whether you had Hulk Product Options, Selleasy or Swym Wishlist Plus installed in October 2026, and test your checkout path in a private window. If shoppers report unfamiliar checkout pages, contact Shopify Support.
Would Subresource Integrity (SRI) have stopped it?
Not in this case. The app's file on Shopify's CDN was unchanged; the malicious code arrived as settings data from the vendor's API, which SRI does not check.
Does Navi+ access my checkout or customer orders?
No. Navi+ requests read-only scopes for themes, products, navigation and content, and has no checkout extension or web pixel.
Sources
- Roman Zipp, Shopify shops hit with ongoing Checkout Hijack attack — romanzipp.com
- cside, HulkApps Shopify checkout hijack — cside.com
- iTnews, Shopify tells Australian store to stay shut — itnews.com.au
- Shopify Changelog, New protection against unexpected redirects — changelog.shopify.com
- Sansec, GorgonAgora fake storefront network — sansec.io
- Shopify Bug Bounty — shopify.com/bugbounty