{"id":378,"date":"2026-09-29T05:27:56","date_gmt":"2026-09-29T05:27:56","guid":{"rendered":"https:\/\/ntrigo.com\/blog\/?p=378"},"modified":"2026-09-23T05:36:00","modified_gmt":"2026-09-23T05:36:00","slug":"your-data-doesnt-have-to-be-breached-by-you","status":"publish","type":"post","link":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/","title":{"rendered":"Your Data Doesn&#8217;t Have to Be Breached by You"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">On September 17, 2026, an attack was disclosed in which threat actors gained access to BigCommerce customer data through a third-party application called Ribon. The attackers obtained access to the application&#8217;s API key and used its permissions to access customer data, including names, email addresses, phone numbers, and shipping addresses.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The interesting part is that BigCommerce itself was not breached. The access came through a third-party system that was connected to the environment and had been granted permission to access data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And that is something every organization needs to consider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We invest heavily in protecting the systems under our direct control: our networks, servers, endpoints, employees, and access to sensitive information. At the same time, we continue to connect more applications, vendors, services, and integrations to our environments, often giving them significant access to our systems and data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once that connection exists, part of our security depends on the security of that third party. If their account is compromised, an API key is stolen, or one of their systems becomes an entry point for an attack, the consequences can reach us even if no one managed to breach our own systems directly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/redfox.ntrigo.com\/phishing-detection-vs-prevention.html\">The same principle applies to phishing<\/a><\/strong>. Attackers do not always need to reach an organization directly. Sometimes they can exploit a system or service that has already earned our trust, using that trusted connection to reach employees, customers, or data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That means cybersecurity is no longer only about how well we protect what is inside our organization. It is also about how well we understand and monitor the places where we extend our trust, access, and connections.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because sometimes, to get to your data, an attacker doesn&#8217;t need to break into you.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They only need to find someone who is already connected to you.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On September 17, 2026, an attack was disclosed in which threat actors gained access to BigCommerce customer data through a third-party application called Ribon. The&hellip;<\/p>\n","protected":false},"author":1,"featured_media":379,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-378","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Your Data Doesn&#039;t Have to Be Breached by You - NTrigo Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Your Data Doesn&#039;t Have to Be Breached by You - NTrigo Security Blog\" \/>\n<meta property=\"og:description\" content=\"On September 17, 2026, an attack was disclosed in which threat actors gained access to BigCommerce customer data through a third-party application called Ribon. The&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/\" \/>\n<meta property=\"og:site_name\" content=\"NTrigo Security Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/nTrigoSoftware\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-29T05:27:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/98FF55.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"512\" \/>\n\t<meta property=\"og:image:height\" content=\"512\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/person\\\/ed9591b6fc8456fc58fae61be7cb0770\"},\"headline\":\"Your Data Doesn&#8217;t Have to Be Breached by You\",\"datePublished\":\"2026-09-29T05:27:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/\"},\"wordCount\":306,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/98FF55.jpg\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/\",\"name\":\"Your Data Doesn't Have to Be Breached by You - NTrigo Security Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/98FF55.jpg\",\"datePublished\":\"2026-09-29T05:27:56+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/98FF55.jpg\",\"contentUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/98FF55.jpg\",\"width\":512,\"height\":512},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/your-data-doesnt-have-to-be-breached-by-you\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Your Data Doesn&#8217;t Have to Be Breached by You\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/\",\"name\":\"NTrigo Security Blog\",\"description\":\"NTrigo Security Blog\",\"publisher\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#organization\",\"name\":\"NTrigo Security Blog\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/NTrigo-Blog.png\",\"contentUrl\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/NTrigo-Blog.png\",\"width\":148,\"height\":95,\"caption\":\"NTrigo Security Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/nTrigoSoftware\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/#\\\/schema\\\/person\\\/ed9591b6fc8456fc58fae61be7cb0770\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/ntrigo.com\\\/blog\"],\"url\":\"https:\\\/\\\/ntrigo.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Your Data Doesn't Have to Be Breached by You - NTrigo Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/","og_locale":"en_US","og_type":"article","og_title":"Your Data Doesn't Have to Be Breached by You - NTrigo Security Blog","og_description":"On September 17, 2026, an attack was disclosed in which threat actors gained access to BigCommerce customer data through a third-party application called Ribon. The&hellip;","og_url":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/","og_site_name":"NTrigo Security Blog","article_publisher":"https:\/\/www.facebook.com\/nTrigoSoftware\/","article_published_time":"2026-09-29T05:27:56+00:00","og_image":[{"width":512,"height":512,"url":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/98FF55.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#article","isPartOf":{"@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/"},"author":{"name":"admin","@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/person\/ed9591b6fc8456fc58fae61be7cb0770"},"headline":"Your Data Doesn&#8217;t Have to Be Breached by You","datePublished":"2026-09-29T05:27:56+00:00","mainEntityOfPage":{"@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/"},"wordCount":306,"commentCount":0,"publisher":{"@id":"https:\/\/ntrigo.com\/blog\/#organization"},"image":{"@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#primaryimage"},"thumbnailUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/98FF55.jpg","inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/","url":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/","name":"Your Data Doesn't Have to Be Breached by You - NTrigo Security Blog","isPartOf":{"@id":"https:\/\/ntrigo.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#primaryimage"},"image":{"@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#primaryimage"},"thumbnailUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/98FF55.jpg","datePublished":"2026-09-29T05:27:56+00:00","breadcrumb":{"@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#primaryimage","url":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/98FF55.jpg","contentUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/09\/98FF55.jpg","width":512,"height":512},{"@type":"BreadcrumbList","@id":"https:\/\/ntrigo.com\/blog\/your-data-doesnt-have-to-be-breached-by-you\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ntrigo.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Your Data Doesn&#8217;t Have to Be Breached by You"}]},{"@type":"WebSite","@id":"https:\/\/ntrigo.com\/blog\/#website","url":"https:\/\/ntrigo.com\/blog\/","name":"NTrigo Security Blog","description":"NTrigo Security Blog","publisher":{"@id":"https:\/\/ntrigo.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ntrigo.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ntrigo.com\/blog\/#organization","name":"NTrigo Security Blog","url":"https:\/\/ntrigo.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/01\/NTrigo-Blog.png","contentUrl":"https:\/\/ntrigo.com\/blog\/wp-content\/uploads\/2026\/01\/NTrigo-Blog.png","width":148,"height":95,"caption":"NTrigo Security Blog"},"image":{"@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/nTrigoSoftware\/"]},{"@type":"Person","@id":"https:\/\/ntrigo.com\/blog\/#\/schema\/person\/ed9591b6fc8456fc58fae61be7cb0770","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0049ab18a7fc704da3bcaaaaf62c9b51301fd388c1e23acc3c15e39b6279ef6a?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/ntrigo.com\/blog"],"url":"https:\/\/ntrigo.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts\/378","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/comments?post=378"}],"version-history":[{"count":1,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts\/378\/revisions"}],"predecessor-version":[{"id":380,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/posts\/378\/revisions\/380"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/media\/379"}],"wp:attachment":[{"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/media?parent=378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/categories?post=378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ntrigo.com\/blog\/wp-json\/wp\/v2\/tags?post=378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}