Third-party breach impacts Ledger

Major hardware cryptocurrency wallet firm Ledger has confirmed that some of its customers had their data stolen following a cyberattack against third-party payment processor Global-e, reports CoinDesk.

Threat actors who infiltrated Global-e's information systems were able to obtain information from Ledger.com buyers who had leveraged Global-e as a Merchant of Record, according to Ledger, which noted that the incident did not impact its platform, hardware, or software systems, while emphasizing that the payment processing company has no access to customers' digital asset secrets.

Additional details regarding the extent of the breach remain uncertain but Global-e noted that customers' names and contact details had been exposed as a result of the cloud system compromise. Such a third-party breach comes after Ledger lost nearly $500,000 in a 2023 crypto heist, as well as leaked data from 270,000 clients in a 2020 breach involving Shopify.