// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / BigCommerce
Breach Record

BigCommerce

DISCLOSED 2026-09-23 · STOLEN CREDS

BigCommerce alerted merchants to a data breach after attackers compromised credentials for third-party applications and used them to inject malicious scripts into online stores, potentially exposing customer information. The breach involved third-party apps, not BigCommerce's core systems. Customer details may have been exposed.

The record

What we know

Disclosed
2026-09-23
Attack vector
Stolen Creds
Sector
E-commerce
Domain
bigcommerce.com
Data classes exposed
customer information
Sources

Cited reporting

↗ the420.in
Similar vector · recent

Other stolen creds breaches on file

Roblox · 2026-09-20 HBO Max · 2026-09-18 Hasbro · 2026-09-02 Anthropic · 2026-09-01 ASOS · 2026-08-27 Amgen Inc. · 2026-08-27 Manchester Airports Group · 2026-08-27 ReliaQuest · 2026-08-26

This page is the permanent ColdRecon entry for the BigCommerce disclosure. It updates if new public reporting emerges. All tracked breaches →

BigCommerce just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →