BigCommerce alerts merchants to data breach linked to Ribon apps

BigCommerce notified multiple merchants of a data breach after attackers compromised credentials for the third-party Ribon and Ribon 1.5 applications and used them to inject malicious scripts into online stores. The attackers accessed shopper data in BigCommerce environments between September 13 and September 17. The affected information may have included full names, email addresses, phone numbers, and shipping postal addresses. BigCommerce said account passwords and payment card information were stored separately and were not exposed.