0:00
0:00
Subscribe to Bankless or sign in
Ledger said some customer data was exposed after unauthorized access to systems operated by its third-party payment processor, Global-e. The company emphasized that its hardware, software, and wallets were not compromised.
What’s the Scoop?
- Source of Breach: Global-e disclosed unauthorized access to a cloud system that stored shopper order data, including names and contact information of some Ledger customers.
- Scope Unclear: Global-e did not say how many customers were affected or when the incident occurred, only that unusual activity was detected and investigated. Ledger noted it was not the only brand affected, as the compromised Global-e system contained order data for multiple companies.
- Ledger Response: Ledger said the breach did not involve its platform, hardware, or software, and that no payment details, seed phrases, balances, or private keys were exposed.
- Past data breaches: The disclosure resurfaced concerns around Ledger’s data security history. In 2020, customer information was exposed through an e-commerce partner, and in 2023 the company suffered a separate exploit tied to decentralized finance applications.
