BigCommerce says attackers stole customer data from online stores after compromising API credentials for the third-party Ribon app run by Fastr-owned Be A Part Of. The stolen data included names, email addresses, phone numbers, and addresses, and BigCommerce said the same credentials were also used between September 13 and September 17, 2026 to inject malicious scripts into a small number of storefronts. BigCommerce says its own platform was not breached; the access came through Ribon and Ribon 1.5 application keys.
Why it matters: Merchants using the affected Ribon apps may have had shopper data exposed and some storefronts may have served malicious code, so this is both a breach and a supply-chain risk. Affected stores should review BigCommerce notices and logs, confirm the apps were removed, investigate customer-data access and script injection, and notify impacted users as needed.
Ionut Arghire
2026.09.22
100% relevant
This article appears to be the first concrete report establishing the underlying event: a BigCommerce ecosystem supply-chain breach via compromised Ribon app credentials that enabled customer-data theft and storefront script injection.
← Back to all stories