Ledger Hit by New Data Breach: Customer Info Exposed via Global-e
5.3 Security Ledger customers face a new data breach after payment processor Global-e exposed names and contact details. No payment or cryptographic data was affected, but users are urged to watch for phishing attempts.
Ledger customers have been notified of a new data breach involving third-party payment processor Global-e, which exposed names and contact information. The breach was detected after unusual activity was found in Global-e's cloud systems, prompting immediate containment and an ongoing forensic investigation. Ledger emphasized that its own hardware, software, and payment systems were not compromised, and no payment information or sensitive cryptographic data was affected. The incident follows previous breaches involving Ledger's external partners, raising concerns about the security of customer data managed by third-party vendors. Customers are advised to remain vigilant against phishing and social engineering attempts, as exposed contact details could be exploited for targeted attacks. Global-e has stated the situation is under control, but the full scope of the breach remains under investigation. The recurring nature of such incidents highlights ongoing challenges in protecting customer privacy within the cryptocurrency hardware industry.
