Skip to content
Swym Wishlist Plus App Compromised in Security Incident

Swym Wishlist Plus App Compromised in Security Incident

First seen 31 Oct 2026, 23:12 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 1, 2026 at 00:14 UTC
  • •Unauthorized configuration change led to script injection in Swym Wishlist Plus app.
  • •Affected storefronts may have redirected customers to a phishing site for payment details.
  • •Swym has paused the app for all merchants and is enhancing security measures.

On October 14, 2026, an unauthorized party modified the Swym Wishlist Plus app configuration, leading to a script injection that redirected shoppers to a fraudulent checkout page. This incident affected a limited number of storefronts using the app, with the malicious code potentially capturing payment card details from users who interacted with the affected pages. Swym initiated mitigation measures starting at 15:02 UTC on the same day, successfully removing the harmful script by 16:32 UTC. The company has confirmed that it does not collect or store payment card information and found no evidence of compromised merchant accounts. Swym has paused the app for all merchants as a precaution and is continuing its investigation. Regular updates are being provided to affected merchants.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-14
Unauthorized change to app configuration
An unauthorized party modified the Swym Wishlist Plus app, causing a harmful script to load on certain storefronts.
Article 2
2026-10-14
Mitigation measures initiated
Swym began rolling out fixes to contain the malicious script at 15:02 UTC, completing all fixes by 16:32 UTC.
Article 2
2026-10-31
App paused for all merchants
Swym decided to disable the Wishlist Plus app for all merchants to prevent further spread of the malicious code.
Article 1

More articles in this cluster (2)

Following this threat?

Track Swym in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3

Common questions

How can I tell if my store is affected?
Swym is providing updates on impacted stores; check their status page for specific information.
What security measures are being implemented?
Swym is enhancing security by adding layers of authentication and monitoring systems closely.
Is customer payment information at risk?
Swym has found no evidence that payment card information was compromised, as they do not store such data.