Checkout incident handoff

Store and contact:
Shopify case number / developer case number:
Exact app and developer:
What we observed (or the provider notice we received):
First / last known observation, with timezone:
Purchase route and device/browser:
Current access restriction or disabled component:
Actions taken, by whom, and when:
Evidence available through a secure channel:

Please confirm:
1. Was this store within scope, and what is its exposure period?
2. Which component or setting was affected, and what was changed?
3. What information could customers have submitted externally?
4. Does remediation account for previously loaded/stored configuration?
5. What evidence verifies the fix for this store?
6. Is any platform restriction still in place, and who resolves it?
7. Who owns the next update, and when should we expect it?

Keep customer details, card information and access credentials out of this
handoff. Agree a secure channel for any sensitive evidence.

Reference: https://getsetka.com/shopify-checkout-hijacking/