BigCommerce data breach forces merchants to act as Ribon apps exploited

BigCommerce data breach details

BigCommerce data breach has prompted the platform to warn hundreds of merchants that credentials for third‑party Ribon applications were hijacked, allowing attackers to embed malicious JavaScript into storefronts. Security teams discovered the breach after anomalous traffic patterns triggered alerts. Immediate remediation steps include revoking compromised API keys and scanning for injected code.

“Merchants must treat this as a high‑severity incident and act without delay,” said a senior security analyst at Reuters.

The intrusion affected ↓ 200 merchants and exposed roughly ↓ 1,200 credentials. BigCommerce has rolled out a patch and urges owners to audit all third‑party extensions. Industry observers warn that similar supply‑chain attacks could rise as e‑commerce ecosystems grow more interconnected.