Tia N.List

Reported by 2 outlets

BigCommerce merchant data breach via compromised third-party Ribon app credentials

hot0.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.80 / 2.0 · best outlet weight
Severity
0.50 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.33 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
bleepingcomputer.combeyondmachines.net first seen 22d ago

Timeline

  1. original reporting

    BigCommerce alerts merchants of data breach linked to Ribon apps

    bleepingcomputer.com · 22d ago · September 21st, 2026

    Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. The cloud-based Software-as-a-Service (SaaS) ecommerce platform confirmed the credential compromise on September 17 and immediately removed the apps to protect its customers. UK-based online spirits vendor Master of Malt is one of the BigCommerce customers that received the notification. The retailer said the attacker accessed shopper information. The hacker used the compromised credentials to access shopper data in BigCommerce environments between September 13 and September 17, the company said. In updates on the incident, Master of Malt says impacted shopper details include full names, email addresses, phone numbers, and shipping postal addresses. “It looks like hackers were able to compromise a BigCommerce Application key held by Ribon, which they were able to use to gain access to customer data held on their system,” Master of Malt stated . BigCommerce supports over 1,200 third-party applications and integrations, including Ribon, an application operated by Be A Part Of, a brand operated by Fastr, specialized in shopping experience optimization. The e-commerce platform says it stores account passwords and payment card information separately and that this type of data was not exposed. In a statement for BleepingComputer, BigCommerce said that the attacker compr

  2. update from beyondmachines.net

    BigCommerce Data Breach Linked to Compromised Ribon App Keys Attackers used compromised Ribon application keys to access customer records an

    beyondmachines.net · 21d ago · September 22nd, 2026

    BigCommerce Data Breach Linked to Compromised Ribon App Keys Attackers used compromised Ribon application keys to access customer records an

    via Mastodon https://beyondmachines.net/event_details/bigcommerce-data-breach-linked-to-compromised-ribon-app-keys-a-u-4-1-d/gD2P6Ple2L

  3. mentioned by beyondmachines.net

    BigCommerce Merchants Suffer Data Breach via Compromised Ribon App API Credentials BigCommerce merchants suffered a data breach after attack

    beyondmachines.net · 20d ago · September 23rd, 2026

Source on GitHub