BigCommerce alerts merchants of data breach linked to Ribon apps
-
BigCommerce has begun notifying merchants of data breaches tied to compromised credentials for third-party Ribon applications. According to the reports, attackers obtained those credentials and used them to inject malicious scripts into online storefronts, potentially exposing customer data entered during checkout.
The incident centers on the Ribon apps rather than BigCommerce's core platform, though affected merchants are being alerted directly by the company. Script injection of this kind typically allows attackers to silently capture payment or personal details as shoppers interact with a compromised store.
At this stage, no specific CVE identifiers or advisory numbers have been disclosed in the reporting, so merchants should rely on official communications from BigCommerce and Ribon for accurate technical details. If you operate a store using any Ribon apps, it is worth reviewing your installed integrations and monitoring for unexpected script changes in your theme or checkout flow.
- Review any active Ribon apps installed on your store
- Audit storefront and checkout code for unauthorized script injections
- Watch for official breach notifications from BigCommerce and Ribon
- Consider rotating credentials associated with third-party app integrations
Source: BleepingComputer
Are you running any Ribon apps on your storefront, and if so, have you received a notification from BigCommerce yet?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login