Hackers Abuse Stolen BigCommerce App Key to Steal Master of Malt Customer Data
Attackers used a stolen Ribon BigCommerce app key to access Master of Malt customer contact data.
Master of Malt said attackers used a stolen application key for Ribon, a third-party BigCommerce app owned by Fastr and managed by Be A Part Of, to read customer records. Access ran from 17:21 BST on September 13 to 21:12 BST on September 17, 2026, when the key was revoked; BigCommerce notified the retailer on September 18. Exposed data included names, email addresses, phone numbers, and physical addresses, but not passwords or payment details. The company reported the incident to the UK ICO under reference IC-569770-Y1R9 and said Ribon, used across many stores, appeared to be the primary target.
56