BigCommerce notified merchants that attackers compromised credentials for the third-party Ribon and Ribon 1.5 applications and used them to inject malicious scripts into a small number of storefronts. Master of Malt said shopper data including names, email addresses, phone numbers, and shipping addresses was exposed, while BigCommerce said its own platform and payment data were not breached. #BigCommerce #Ribon #MasterofMalt #Fastr #BeAPartOf
Keypoints
- Attackers compromised credentials for the Ribon and Ribon 1.5 apps.
- The stolen access was used to inject malicious scripts into merchant storefronts.
- BigCommerce removed the affected apps and notified impacted merchants.
- Master of Malt said shopper names, emails, phone numbers, and addresses were exposed.
- BigCommerce said its platform and stored payment card data were not breached.