Ledger suffers new leak of customers' personal data

Source: PortaldoBitcoin Original Title: Ledger suffers new data breach exposing customers’ personal information Original Link: Ledger has experienced another attack that exposed customers’ personal data. The company’s users were alerted about a security incident involving a third-party payment processor used by Ledger.

The alert was published by blockchain investigator ZackXBT, stating that Global-e, a payment and logistics provider used by Ledger for international transactions, had experienced a data exposure.

An email from Ledger stated that the compromised data included customer names and other contact details, although it did not specify the total number of affected users.

Ledger did not issue an official statement regarding the breach. Therefore, it is unclear how long the data was accessible and whether other information was affected, beyond the overall scope of the issue.

Ledger is best known as a manufacturer of hardware wallets and claims that its products are a security-focused alternative to software wallets and centralized exchanges, serving both individual and institutional cryptocurrency users worldwide.

It is worth remembering that in 2020, a database containing personal information of over 270,000 of the company’s customers was published on hacker forums, exposing names, email addresses, phone numbers, and in some cases, residential addresses.

Ledger offered a Bitcoin reward for information related to the data attacks, but a class action was filed against the company and its e-commerce partner due to this breach, alleging that inadequate data protection put customers at risk.

What Ledger and Global-e Say

Global-e stated that it detected unusual activity and quickly implemented control measures, in addition to conducting an investigation that confirmed unauthorized access.

“We hired independent forensic experts to investigate the incident and determined that some personal data, including name and contact information, was improperly accessed,” the company said.

Ledger said it was aware of the case and emphasized that the impact was limited to Global-e. “There was no breach of Ledger’s platform, hardware, or software systems, which remain secure,” the company stated.

Ledger explained that customer payment information was not affected by the breach and that it is working with Global-e to contact affected users and provide the necessary information.