Ledger suffers new leak of customers' personal data

Source: PortaldoBitcoin Original Title: Ledger suffers new data breach exposing customer personal information Original Link: Ledger has experienced another attack that exposed customer personal data. The company’s users were alerted about a security incident involving a third-party payment processor used by it.

The alert was published by blockchain investigator ZackXBT and stated that Global-e, a payment and logistics provider used by Ledger for international transactions, had experienced a data exposure.

An email from Ledger stated that the compromised data included customer names and other contact details, although it did not specify the total number of affected users.

Ledger did not issue an official statement regarding the breach. Therefore, it is unclear how long the data was accessible and whether other information was affected, beyond the overall scope of the issue.

Ledger is best known as a manufacturer of hardware wallets and claims that its products are a security-focused alternative to software wallets and centralized exchanges, serving both individual and institutional cryptocurrency users worldwide.

It is worth remembering that in 2020, a database containing personal information of over 270,000 of the company’s customers was published on the hacker forum RaidForums, exposing names, email addresses, phone numbers, and in some cases, residential addresses.

Ledger offered a Bitcoin reward for information related to the data attacks, but a class action was filed against the company and its e-commerce partner Shopify due to this breach, claiming that inadequate data protection put customers at risk.

What Ledger and Global-e Say

Global-e stated that it detected unusual activity and quickly implemented control measures, in addition to conducting an investigation that confirmed unauthorized access.

“We hired independent forensic experts to investigate the incident and determined that some personal data, including name and contact information, was improperly accessed,” the company said.

Ledger said it was aware of the case and emphasized that the impact was limited to Global-e. “There was no breach of Ledger’s platform, hardware, or software systems, which remain secure,” the company stated.

Ledger explained that customer payment information was not affected by the breach and that it is working with Global-e to contact affected users and provide the necessary information.