BigCommerce alerts merchants of data breach linked to Ribon apps

BigCommerce notified multiple merchants of a data breach resulting from compromised credentials for third-party Ribon and Ribon 1.5 applications, operated by Be A Part Of (a Fastr company). Attackers used the stolen application keys between September 13 and 17, 2026, to access customer data in BigCommerce stores, including names, email addresses, phone numbers, and shipping addresses. The platform confirmed that its core systems were not breached and that payment and password data remained secure. Malicious scripts were injected into affected merchant storefronts, and BigCommerce uninstalled the apps to revoke access.

AI-extracted · verify before operational use