BigCommerce Breach Exposes Merchant Customer Data

BigCommerce confirmed attackers compromised credentials for third-party app Ribon and injected malicious scripts into merchant storefronts from September 13 to 17, 2026. Master of Malt notified customers that names, emails, phone numbers and addresses were exposed. BigCommerce says only a small number of stores were affected, but Master of Malt says Ribon was installed on hundreds of BigCommerce stores.