Polski
Parcel Lockers, Negotiations, and a Data Breach: A Week That Reminded E-commerce About Costs and Weak Links
This week in e-commerce tells the story of two risks every online store has to reckon with: logistics costs and customer data security. Allegro and InPost are looking for an agreement to shape their relationship for the next five years, while BigCommerce is a reminder that an integration chain is only as strong as its weakest plugin.
01 · Logistics
Allegro and InPost: Is the End of the Dispute in Sight? [1]
The biggest story of the week in Polish e-commerce is the upcoming agreement between Allegro and InPost. The two companies are holding advanced talks on a new, multi-year contract covering parcel locker deliveries, one that could remain in force all the way through 2031. Three key issues are on the table: lower delivery prices, a revised formula for indexing those prices over time, and long-term arrangements for the volume of shipments handed over to InPost.
A clear sign that the talks are entering a decisive phase is the suspension of the arbitration proceedings between the two parties — the companies evidently prefer to hash things out at the negotiating table rather than wait for a legal dispute to be resolved. Allegro's CEO describes the atmosphere of the talks as good, though stresses there's still some way to go before a final signature. For the thousands of sellers who rely on parcel lockers as their main delivery channel, this carries real practical weight — the final shape of the deal, and especially the new pricing formula, will feed directly into last-mile logistics costs, and from there into margins and prices at online stores across Poland.
From the domestic logistics scene, let's move to the global stage of e-commerce security — because this week also showed that even large, well-established platforms can fall victim to an attack through what seems like a minor piece of their infrastructure.
02 · Cybersecurity
Data Breach at BigCommerce: When the Threat Is the Plugin, Not the Platform [2]
Between September 13 and 17, 2026, a security incident on the BigCommerce platform nicely illustrated how today's supply-chain attacks on e-commerce actually work. The attackers didn't go after the platform itself; instead, they exploited a compromised application key belonging to Ribon, a provider operating under the Fastr brand. That gave them access to customer data in every store that had this particular integration installed.
According to the breach disclosure, the personal data that fell into the attackers' hands included first and last names, email addresses, phone numbers, and mailing addresses. The good news is that passwords and payment data remained safe, since they were stored in a separate system unconnected to the app. BigCommerce's security team responded by removing the compromised app from every store on September 17.
This incident is a textbook example of a supply chain attack: instead of breaking through the defenses of a large, well-protected platform, attackers target a smaller, less secure third-party app provider that nonetheless has access to the data of hundreds of stores at once. For e-commerce owners, it's a reminder that store security doesn't end with choosing a platform — every installed plugin or integration is a potential new attack vector, and one worth auditing regularly.
Summary
Summary
This week revealed two sides of the same coin: on one hand, the fight over hard, measurable logistics costs that determine the profitability of online sales; on the other, the growing complexity of the integration ecosystem, where customer data security depends on the weakest link in the supplier chain. We'll be covering both topics — parcel locker delivery pricing and e-commerce integration security — in depth at eTrade Show – Międzynarodowe Targi Branży E-commerce. It's a great opportunity to talk with logistics and cybersecurity experts and see how other companies are tackling similar challenges. We hope to see you there!
Invitation
Want to find out how to actually cut delivery costs and protect your store from attacks on the integration chain? Join us at eTrade Show – Międzynarodowe Targi Branży E-commerce, where logistics and security experts will share practical solutions. You'll meet representatives from courier companies, fintech providers, and data protection specialists. Check out the program and reserve your spot today.
eTrade Show 2026Footnotes
[1] dlahandlu.pl — https://www.dlahandlu.pl/e-commerce/allegro-chce-tanszych-dostaw-z-inpostu-umowa-az-do-2031-roku,175393.html[2] Born's Tech and Windows World — https://borncity.com/blog/en/2026/09/19/ecommerce-plattform-bigcommerce-wohl-ueber-drittanbieter-ribon-gehackt/