BigCommerce Merchants Alerted to Data Breach Linked to Compromised Ribon App Credentials
Attackers injected malicious scripts into online stores via third-party Ribon applications, compromising merchant data

Key Takeaways
- BigCommerce merchants are being alerted to data breaches linked to compromised Ribon application credentials.
- Attackers used stolen credentials to inject malicious scripts into online stores.
- The injection of malicious scripts poses a risk of data exfiltration from affected stores.
- Merchants should review Ribon app permissions and monitor for unusual activity.
Related Security News

Star Blizzard Campaign Targets 100+ Organizations with Fake Event Invitations
Microsoft reports that the Russian state-sponsored threat actor Star Blizzard has been conducting a sustained campaign since January 2026, using fake event invitations to trick targets into installing a backdoor on Windows computers. The operation has affected more than 100 organizations, primarily in the U.S. and U.K., with victims tied to Ukraine. At least one infection has been confirmed, though the full extent of breaches and data exfiltration remains unverified.




