BigCommerce has notified multiple merchants of a data breach after attackers compromised credentials belonging to third-party Ribon applications. The ecommerce platform said the attackers used those stolen credentials to inject malicious scripts into online stores.
The breach appears to have originated with the third-party apps rather than BigCommerce's own platform. Merchants using Ribon applications were the ones affected, and BigCommerce moved to alert them directly.
Because the source is a single report, there is no independent account of the incident yet. The report does not indicate whether other third-party apps were involved or how many merchants received alerts.