FreshClick

Attackers used a stolen Ribon app key to read shopper records across BigCommerce stores

A credential held by a third-party app vendor gave attackers four days of access to shopper records in BigCommerce stores. Cutting off that access meant uninstalling the app.