[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-bigcommerce-breach-via-ribon-app-exposes-merchant-customer-data":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},7197,"bigcommerce-breach-via-ribon-app-exposes-merchant-customer-data","BigCommerce Breach via Ribon App Exposes Merchant Customer Data","A compromised third-party app credential let attackers pull customer data from hundreds of BigCommerce stores, though the company calls it a small incident.","Attackers stole customer names, emails, phone numbers, and addresses from BigCommerce stores by hijacking a third-party app's access key.\n\nBigCommerce confirmed that credentials belonging to Ribon and Ribon 1.5, a storefront app made by \"Be A Part Of,\" a Fastr company, were compromised between September 13 and 17, 2026. Attackers used the stolen key to inject malicious scripts and pull customer data from merchant storefronts before BigCommerce revoked access and uninstalled the app. Online spirits retailer Master of Malt, one of the affected merchants, notified customers that their names, emails, phone numbers, and addresses were exposed - though passwords and payment details, stored separately, were untouched. Master of Malt says the app was installed on hundreds of BigCommerce stores, and multiple retailers are now notifying their own customers.\n\nBigCommerce's own description - \"a small number of merchant storefronts\" - undercuts what Master of Malt is telling customers directly, and the discrepancy matters for anyone trying to gauge their exposure. This is a supply-chain breach: the platform itself wasn't hacked, a single third-party integration was, and that one weak link fanned out to every store that trusted it. Ecommerce platforms increasingly run on stacks of bolt-on apps, and this incident is a reminder that a storefront is only as secure as its least-scrutinized plugin.\n\nLaw firm Emery Reddy is already fielding potential claims and warning of follow-up phishing attempts - the kind of second-wave fallout that tends to outlast the headlines about the breach itself.","[\"bigcommerce\",\"data breach\",\"supply chain security\",\"ecommerce\"]","2026-09-22T12:00:00.000Z","2026-09-22T14:02:50.232Z","2026-09-22T14:03:02.150Z","published",null,[],"security",[26,27,28,29],"bigcommerce","data breach","supply chain security","ecommerce",[31],{"name":32,"url":33},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fbigcommerce-warns-customers-of-potential-data-leaks-following-cyber-incident",0,{"sections":36},[37,42,46,51,56,61,66,71,76,80,84,89,94,98],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",4184,"2026-09-22T13:52:15.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":45},"Security",690,"2026-09-22T14:00:00.000Z",{"name":47,"slug":48,"count":49,"latest_published_at":50},"Policy","policy",364,"2026-09-22T12:37:38.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",192,"2026-09-22T13:37:13.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Hardware","hardware",163,"2026-09-22T13:20:00.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Science","science",130,"2026-09-20T13:48:11.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",104,"2026-09-22T13:00:00.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Dev Tools","dev-tools",78,"2026-09-18T04:00:00.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":70},"Software","software",77,{"name":81,"slug":82,"count":83,"latest_published_at":70},"Startups","startups",61,{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",44,"2026-09-22T14:01:16.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",43,"2026-09-21T23:48:56.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":70},"Reviews","reviews",27,{"name":99,"slug":100,"count":101,"latest_published_at":102},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]