It’s usually “Florida Man” did this and that, but this time, California takes front stage. More precisely, a man in California was indicted and charged with stealing merchant/customer data from Shopify.
The man has been charged with conspiracy to commit fraud and aggravated identity theft for stealing Shopify merchant/customer data. Who is this man, you asked?
According to the grand jury indictment, the “California Dude” is Tassilo Heinrich, an 18 year old at the time of the crime. Tassilo used the stolen data to create fake merchant pages to take business from sellers, things like names, email and billing addresses, and payment methods.
Moreover, he allegedly sold data stolen from Shopify to his co-conspirators, who also used it to commit fraud against Shopify merchants and their customers, according to the indictment.
The scheme lasted for a whole year, during which Heinrich had a partner in crime, who was actually a customer support agent authorized to use Shopify’s internal network. A mole, so to speak, or an insider.
The Shopify agent was paid in crypto for his services. Tassilo has pleaded not guilty. Here’s a statement from Shopify:
“Shopify has cooperated with the FBI to investigate an incident involving the data of a small number of our merchants in September 2020. As previously stated, the perpetrators involved no longer work with Shopify. Because there is an active criminal investigation, we are unable to provide further comment at this time.”