Shopify · Report #216389
Full access at an internal service of Shopify
Validstatus
5upvotes
28 Mar 2017disclosed
Summary
A Security Monkey instance was left accessible to the public. Even though this is outside of our usual scope, we fixed and rewarded this issue due to the nature of the information contained in this instance.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.