Ledger Customer Data Breached via Third-Party Payment Processor
Ledger, the cryptocurrency hardware wallet provider, confirmed a data breach involving its third-party payment partner Global-e. The incident exposed customer names and contact details but did not compromise Ledger's internal systems or payment data.
Global-e detected unauthorized access to a cloud storage segment used for order processing. The attackers accessed information from customers who had transacted on Ledger's website through Global-e's platform. The breach was swiftly contained, and forensic investigations are underway.
Affected customers received direct notifications from Global-e. The incident highlights the risks of third-party dependencies in crypto infrastructure, though Ledger emphasized its core security remained intact.