Big Commerce warns customers of potential data leaks following cyber incident | Tech Radar

Overview

News, deals, reviews, guides and more on the newest computing gadgets

Start exploring exclusive deals, expert advice and more

Details

Unlock and manage exclusive Techradar member rewards.

Unlock instant access to exclusive member features.

Get full access to premium articles, exclusive features and a growing list of member rewards.

Big Commerce warns customers of potential data leaks following cyber incident

Hackers broke into a third-party app and stole customer data

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Big Commerce confirms supply‑chain breach via compromised Ribon app credentials affecting merchant storefronts

Master of Malt notified customers: names, emails, phone numbers, and addresses were exposed

Attack ran Sept 13–17 2026; ICO notified, law firm warns of phishing risks for affected retailers

Ecommerce platform Big Commerce was recently hit with a cyberattack in which it lost sensitive data belonging to some of its users.

One of the users - online spirits retailer Master of Malt - confirmed the hit and notified its customers that their personally identifiable information (PII) was accessed in the attack.

Big Commerce is an ecommerce platform relatively similar to Shopify. Businesses use it to build and operate online stores without needing to develop the entire commerce infrastructure themselves. It offers features like storefronts, shopping carts, integrations with different payment providers, product inventories, SEO and marketing tools, and more.

The platform has been around since 2009 and according to a late 2024 SEC filing, serves 5,884 accounts with at least one unique enterprise plan subscription. A 2025 press release says Big Commerce is used by “tens of thousands of B2C and B2B companies across 150 countries.”

Big Commerce allows its users to install, among others, a third-party app called Ribon, an ecommerce app providing tools that improve the online shopping experience. Some merchants integrate Ribon into their stores to add different functionality to the customer-facing storefront, and to optimize how visitors interact with different elements of their website. We don’t know exactly how many stores use Ribon.

Lidl customers across Europe hit in suspected data breach - here's what we know

Carhartt data breach exposed information from 12.9 million user accounts

Levi's reveals security tear may have let hackers steal important corporate data

According to Master of Malt, unidentified threat actors managed to compromise a Big Commerce Application key held by Ribon, and used it to access customer data that was held on their system. The attack took place on Sunday, September 13 2026, until the access was finally revoked four days later, on September 17.

Speaking to Bleeping Computer, Big Commerce said credentials for Ribon and Ribon 1.5 were compromised:

"On September 17, 2026, Commerce confirmed that credentials belonging to third-party applications Ribon and Ribon 1.5, owned and operated by 'Be A Part Of,' a Fastr company, had been compromised and used to inject malicious scripts into a small number of merchant storefronts,” the statement reads. "Acting in the best interest of our customers and their shoppers, we uninstalled the application from affected stores to revoke the attacker's access, notified those merchants directly, and are providing log data to support the developer's investigation," the company told the publication.

The keyword in this statement is “small number of merchant storefronts.” Big Commerce hints that the attack was relatively small in scope and, consequently, in damage. However, in its report Master of Malt says otherwise:

“It’s now clear that we weren’t the target of the attack. The attack was against Ribon, which was installed on hundreds of Big Commerce stores. Once the attackers compromised an access key from Ribon, they used it to access data held inside Big Commerce.”

Massive supply-chain attack sees terabytes of data leaked online

Pokémon Center data breach exposes customer info, cancels some orders

Manchester Airports hack: Experts weigh in on 8.7M data leak

Whether or not this transforms into a new Snowflake fiasco remains to be seen.

In the meantime, Master of Malt also said Big Commerce notified it that the attack had been stopped and that there was no further risk of compromise. All companies affected by the breach were contacted. As for the spirits retailer, here is what it said about the data exposed in the hit:

“I’m sorry to say that the attackers had access to your name, email address, phone number, and address. However, they were not able to access your password, credit card or other payment information as they are held in a separate system which was never compromised.”

Master of Malt reported the attack to the UK Information Commissioner’s Office (ICO). Law firm Emery Reddy is calling for potential claimants to the incidents, saying that “several retailers” are currently notifying customers about data exposure related to the incident, Bleeping Computer reported.

“A number of online retailers that use the Big Commerce e-commerce platform have begun notifying customers of a data breach that originated not with the retailers themselves, but with a third-party application called Ribon,” the law firm says. Emery Reddy also warned of potential phishing and scam attacks.

➡️ Read our full guide to the best antivirus

Best overall: Bitdefender Total Security
Best for families: Norton 360 with Life Lock
Best for mobile: Mc Afee Mobile Security

Follow Tech Radar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, Io T, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Big Commerce warns customers of potential data leaks following cyber incident

The bizarre rise of ‘grandmaslop’ — grandparents are filling family albums with AI images, and their kids hate it

Alien: Isolation 2 artist says Creative Assembly has to 'recontextualize' things from the film that would 'be believable' in the game's outdoor setting, and it makes sense 'through the lens of someone from the 1970s'

i OS 27.2 beta 2 includes new details of an i Phone anti-snatching feature, plus a first look at more changes coming to Apple Music, Shortcuts, and more

‘I wish Apple would just stop that crap': Apple has added persistent ‘ads’ to i OS, and it’s driving users crazy

Tech Radar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.

Key Takeaways

News, deals, reviews, guides and more on the newest computing gadgets
Start exploring exclusive deals, expert advice and more
Unlock and manage exclusive Techradar member rewards
Unlock instant access to exclusive member features
Get full access to premium articles, exclusive features and a growing list of member rewards