BigCommerce

Profile narrative

BigCommerce is a United States-headquartered technology company that provides a cloud-based ecommerce platform for merchants operating online stores. Its core service is software-as-a-service infrastructure that businesses use to create, operate, and maintain digital storefronts. The platform supports online selling functions such as product catalog presentation, checkout, order handling, and connections to payment, fulfillment, and other commerce services. It is positioned in the ecommerce software sector, where its role is to provide hosted technology for internet-based transactions rather than to act as a retailer, marketplace, logistics carrier, or payment acquirer. The platform is used in commerce contexts where merchants need a configurable online sales channel and a hosted environment for managing store operations. The supplied material identifies the company’s headquarters as the United States of America but does not provide employee count, revenue, merchant count, or market share.

BigCommerce is distinguished by its focus on ecommerce enablement through a hosted platform with an extensible application and API environment. Third-party applications can connect to stores and, when authorized, access data needed to provide added functionality. This design gives merchants a way to extend store capabilities beyond the platform’s base functions. It also makes application permissions and API credential controls operationally important because third-party access can involve customer information. The supplied incident overview describes a supply chain attack in which attackers compromised API credentials of the third-party Ribon application. The compromised credentials were used to retrieve customer data stored on BigCommerce, including names, email addresses, phone numbers, and addresses from affected stores. The attackers downloaded the information page by page until the compromised key was revoked and the application was removed.

BigCommerce responded by notifying merchants, disabling the compromised key, uninstalling Ribon apps from impacted stores, and providing log data to assist the application developer’s investigation. This response shows that the company’s platform operations include incident handling involving third-party applications and merchant data access. The incident also places API credential management and third-party app oversight within the company’s relevant security context. The supplied material does not identify a parent company, ownership group, or subsidiary structure for BigCommerce.

Incidents

1 incident linked to this organisation.