On September 23, 2026, an attack on a BigCommerce app compromised customer data from Master of Malt, including names, addresses, emails, and phone numbers, with attackers having access for four days.
Starting September 21, 2026, BigCommerce alerted merchants of a data breach after attackers compromised credentials for third-party Ribon payment applications and used them to inject malicious scripts into online storefronts, exposing customer data. The breach represented a supply-chain compromise affecting multiple merchants.