Stage 3 of 6 • Security Review

Current Status of the Security Incident

On 27 July we detected and resolved a security issue in Rebolt Bundle. Shopify has temporarily delisted the app while it reviews our findings. Every bundle, offer, and setting you built is saved and intact — nothing has been lost. This page tracks exactly where we are in getting your offers back on your storefront.

Recovery Progress Now at stage 3 — independent assessment underway
Active Stage Security review
Shopify has asked for two things before sign-off: an independent third-party Vulnerability Assessment and Penetration Testing (VAPT) report, and a formal Incident Report. We've engaged a specialist security firm and that work is underway. We'll post the next update the moment it's complete and we hear back from Shopify's team.
A stage moves forward only once it's genuinely complete — we don't advance the tracker on estimates.
FOR MERCHANTS

How this affects your store

The four things merchants have asked us most since Monday, answered plainly.

Your bundle data
Safe

Safe — nothing lost

Every offer, configuration, discount rule, and setting inside Rebolt Bundle is saved. There has been no data loss, and you won't need to rebuild anything. When the app is restored, your bundles come back as you left them.

Your storefront
Safe

Bundle offers hidden

Bundle offers have stopped displaying on your storefront. Your products remain visible and fully purchasable at their normal prices — no orders are blocked and checkout is unaffected. The app itself stays installed on your store.

Opening the app
Safe

May look different

If you open Rebolt Bundle from your Shopify admin, you may land on the pricing plan page or the dashboard instead of your usual view. This is expected while the listing is delisted — it doesn't mean anything is wrong with your account or your data.

Getting help
Safe

Support open 24/7

Our support team is available around the clock throughout this process. If something on your storefront doesn't look right, message us with what you're seeing and we'll check your specific setup.

Newest first · all times IST

Incident Updates

We're committed to keeping you informed. This timeline records every significant update, from detection and investigation to remediation and recovery.

Wed, 30 JulyLATEST
Rebolt Bundle
3:30 AM UTC

Third-party security firm engaged

We've engaged a specialist third-party security firm to carry out the Vulnerability Assessment and Penetration Testing, and that work is now underway.
We'll share the next update as soon as this step is complete and we hear back from Shopify's team.

9:31 PM UTC1 UPDATE
Shopify
9:31 PM UTC

Independent security assessment requested

After reviewing our initial report, Shopify's team asked us for two further items as the next step: an independent, third-party Vulnerability Assessment and Penetration Testing (VAPT) report, and a formal Incident Report (IR).

Mon, 28 July2 UPDATES
Rebolt Bundle
12:59 AM UTC

Initial report shared with Shopify

We shared our initial report of the incident with Shopify. Their team confirmed it as part of the review process to restore the app's availability and allow existing merchants to display their bundle offers again.

Shopify
7:59 PM UTC

App temporarily delisted as a precaution

As a precautionary measure, Shopify temporarily delisted Rebolt Bundle from the Shopify App Store, and bundle offers stopped displaying on merchant storefronts. The app remains installed on your store — only the display of bundle offers on the storefront was switched off. All bundle details and data remain saved.

Sun, 27 July3 UPDATES
REBOLT BUNDLE
6:15 PM UTC

Issue resolved on our side

Our technical team identified and successfully resolved the issue within Rebolt Bundle's systems.

REBOLT BUNDLE
4:45 PM UTC

Fix in development

Having traced the cause, our engineering team began work on the fix.

REBOLT BUNDLE
1:06 PM UTC

Security issue detected

The issue was brought to our attention through our support team, and our technical team began investigating immediately.

⚡ Live Support Operational

Questions about your store?

We know every hour matters when you're running a business. Our team is available 24/7 throughout this — tell us what you're seeing and we'll look at your specific setup.
Contact support