Latest update on a security issue

What happened (latest first)

1. Latest update · July 20, 2026

   Initial security test completed, review continues

   Over the past 24 hours, Fast Bundle completed a thorough immediate online penetration test, and no security vulnerabilities were found in the areas reviewed.

   We have shared the incident details and relevant updates with our customers. At this time, there is no evidence that any customer, store, or shopper data was accessed, exposed, or leaked, and we believe the risk of a data breach remains low.

   We remain in close contact with Shopify and are working through the required review process. Our priority is to restore Fast Bundle for existing merchants as soon as possible and minimize any further disruption to their businesses.

   We will continue to share updates as they become available. Cross your fingers and stay in touch with our status or support team.

2. July 19, 10:00 AM UTC

   Independent security assessment initiated

   After sharing our initial report with Shopify and their confirmation, their team asked us to provide two additional items as the next step in their review process: an independent, third-party Vulnerability Assessment and Penetration Testing (VAPT) report, and a formal Incident Report (IR).

   We've engaged a specialized third-party security firm to carry out this work, and it is now underway.

   We will share another update as soon as this step is complete and we hear back from Shopify's team.

3. Review process

   Initial report shared with Shopify

   We shared our initial report of the incident with Shopify, and their team confirmed it as part of the review process to restore the app's availability and allow existing users to reactivate their bundles.

4. Precautionary measure

   Temporary removal by Shopify

   As a precautionary measure, Shopify temporarily removed Fast Bundle from the App Store and deactivated the app for existing users. This is why Fast Bundle may show as uninstalled on your store.

5. Shortly after detection

   Issue resolved on our side

   Our technical team identified and successfully resolved the issue within Fast Bundle's systems.

6. July 17, 16:21 UTC

   Security attack detected

   The issue was brought to our attention through our support team, and our technical team began investigating immediately.