BigCommerce App Breach Exposes Master of Malt Data

Attackers used a compromised BigCommerce app key from third-party app Ribon to inject malicious scripts into merchant storefronts between September 13 and 17, exposing Master of Malt customer names, emails, phone numbers and addresses. Passwords and payment data were not affected. BigCommerce removed the app the same day, but Master of Malt says Ribon was installed on hundreds of stores.