0
0
Ledger Customers Hit by Third-Party Data Exposure
Ledger customer contact information held by a payment processing partner was exposed in a newly disclosed breach. Ledger's hardware wallets and software were not compromised, the company said.
0
0
Ledger said some customer data was exposed after unauthorized access to systems operated by its third-party payment processor, Global-e. The company emphasized that its hardware, software, and wallets were not compromised.
What’s the Scoop?
- Source of Breach: Global-e disclosed unauthorized access to a cloud system that stored shopper order data, including names and contact information of some Ledger customers.
- Scope Unclear: Global-e did not say how many customers were affected or when the incident occurred, only that unusual activity was detected and investigated. Ledger noted it was not the only brand affected, as the compromised Global-e system contained order data for multiple companies.
- Ledger Response: Ledger said the breach did not involve its platform, hardware, or software, and that no payment details, seed phrases, balances, or private keys were exposed.
- Past data breaches: The disclosure resurfaced concerns around Ledger’s data security history. In 2020, customer information was exposed through an e-commerce partner, and in 2023 the company suffered a separate exploit tied to decentralized finance applications.