TLDR InfoSec · ATTACKS & VULNERABILITIES

BIGCOMMERCE DATA STOLEN VIA RIBON APPS HACK

links.tldrnewsletter.com2 min read

Summary from the TLDR InfoSec newsletter

Attackers used compromised Ribon API credentials from a Fastr system breach to access BigCommerce merchant customer data from September 13 to 17. Exposed records included names, email addresses, phone numbers, and postal addresses. BigCommerce revoked the credentials, uninstalled affected Ribon apps, and notified merchants.