BigCommerce Data Stolen via Ribon Apps Hack
Attackers stole BigCommerce shopper data by abusing compromised Ribon application API credentials.
BigCommerce notified merchants that customer data was stolen after attackers compromised an application key for Ribon, a storefront app owned by Fastr company Be A Part Of. The key was used from September 13 to September 17, 2026, to download names, email addresses, phone numbers, and addresses until it was revoked. BigCommerce said credentials for Ribon and Ribon 1.5 were abused after a Fastr system compromise and that malicious scripts were injected into a small number of storefronts. The company said its own platform was not breached, uninstalled the apps from affected stores, and began merchant notifications on September 18.
- Attackers used a compromised Ribon API key from September 13 to 17, 2026.
- Stolen data included customer names, emails, phone numbers, and addresses.
- Ribon was installed on hundreds of BigCommerce stores.
- Malicious scripts were injected into a small number of merchant storefronts.
- BigCommerce says its platform was not breached and uninstalled the apps.
- ATT&CK
- T1195.002 Compromise Software Supply ChainT1078.004 Valid Accounts: Cloud AccountsT1059.007 JavaScriptT1213 Data from Information Repositories
- Vendors
- BigCommerceFastr
- Products
- BigCommerceRibonRibon 1.5
- Organizations
- BigCommerceBe A Part OfFastrMaster of Malt
From the original article
2 min read at securityweek.com
The attackers used a compromised BigCommerce application key held by Ribon to access customer data. The post BigCommerce Data Stolen via Ribon Apps Hack appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.