Master of Malt Discloses Data Breach Tied to Compromised BigCommerce App Key

Online retailer Master of Malt confirmed that customer information was accessed after a malicious actor obtained an application key associated with a third‑party BigCommerce integration. The breach was first flagged by BigCommerce, which alerted the retailer in early September, prompting an internal investigation and public disclosure.

The compromised key belonged to Ribon, a shopping‑cart app that operates under the Fastr brand and is managed by the technology firm Be A Part Of. Security analysts believe the attackers used the stolen credentials to infiltrate the merchant's storefront, extracting data stored within the platform’s customer database.

Master of Malt, a specialist in craft spirits and beverages, has not detailed the exact scope of the compromised records, but typical e‑commerce breaches involve names, email addresses, shipping details, and possibly payment information. The company has urged affected users to monitor their accounts for suspicious activity and to adopt stronger password practices.

Industry observers note that the incident underscores the risks inherent in relying on third‑party extensions within hosted commerce solutions. While platforms like BigCommerce provide a marketplace of add‑ons to extend functionality, each integration introduces a potential attack surface. Vendors are therefore urged to enforce rigorous key management, regular rotation, and comprehensive monitoring to detect anomalous use.

In response, Master of Malt says it has reset all application keys linked to the Ribon app, conducted a security audit of its storefront, and is working with BigCommerce and independent forensic firms to assess any lingering vulnerabilities. The breach serves as a reminder to online merchants of the importance of continuous vigilance over third‑party dependencies as e‑commerce ecosystems grow increasingly complex.