BigCommerce alerts merchants of data breach linked to Ribon apps
Attackers used stolen Ribon app keys to access BigCommerce shopper data and inject storefront scripts.
BigCommerce said credentials for third-party Ribon and Ribon 1.5 apps, operated by Be A Part Of (a Fastr brand), were compromised and used from September 13 to 17, 2026. Attackers accessed existing shopper records and injected malicious scripts into a small number of merchant storefronts. UK retailer Master of Malt said exposed data included names, email addresses, phone numbers, and shipping addresses, while passwords and payment cards were not affected. BigCommerce uninstalled the apps, notified merchants, and reported the incident may extend to other stores.
- Stolen Ribon and Ribon 1.5 credentials accessed BigCommerce merchant environments.
- Exposed shopper details include names, emails, phones, and shipping addresses.
- Account passwords and payment card data were not exposed.
- BigCommerce uninstalled the apps on September 17 and says its platform was not breached.
- Master of Malt notified the UK ICO and warned the impact may cover many stores.
- ATT&CK
- T1078 Valid AccountsT1199 Trusted RelationshipT1059.007 JavaScriptT1213 Data from Information Repositories
- Vendors
- BigCommerce
- Products
- BigCommerceRibonRibon 1.5
- Victims
- Master of Malt
- Countries
- United Kingdom
From the original article
2 min read at bleepingcomputer.com
Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.