Master of Malt has told customers that attackers accessed personal data after compromising the Ribon app connected to its BigCommerce online shop. The breach matters because the stolen information could support phishing, spam and scam calls, although the retailer says passwords and payment details were not exposed.

Attackers used a compromised BigCommerce application key to access names, email addresses, phone numbers and postal addresses between 13 and 17 September. BigCommerce removed the affected app and said there was no continuing access; the number of affected merchants and customers, and how the key was stolen, remain unclear.