Ledger, another customer information leak... Exposing order history and contact information due to external hacking

Source: TokenPost Original Title: Ledger Confirms Customer Data Breach Due to External Hack, Exposing Order Details and Contact Information Original Link: Ledger, a cryptocurrency wallet manufacturer, has officially confirmed that its customer information was leaked due to a hacking incident involving an external partner. The incident targeted the e-commerce platform Global-e, resulting in the exposure of some customers’ names and contact details.

After becoming aware of the attack, Global-e notified customers via email. Ledger emphasized in a statement, “Our hardware and software are not directly targeted by hacking and have not been affected in terms of wallet security.” The hacking occurred within Global-e’s order system, and some order information of customers who used Global-e as an official trading partner during the sales process was exposed.

Ledger sells hardware wallets capable of storing cryptocurrencies and NFTs. These wallets are designed to securely protect crypto assets offline using a 24-word recovery seed, and users can manage assets, purchase, and exchange through Ledger’s dedicated app, ‘Ledger Live.’ However, partners like Global-e do not have access to these security systems or devices.

Global-e announced that upon detecting unusual activity on part of the network, they shut down the system and initiated an investigation. According to them, the leaked data included names, addresses, emails, phone numbers, and order details, but did not contain sensitive financial information such as payment details or account passwords.

Ledger had previously experienced a data breach in 2020, where approximately 270,000 customer records were leaked due to a hacking of its marketing and commerce database. Additionally, around 292,000 customer records were exposed due to an insider job by a former employee of Shopify, a partner at the time, causing significant controversy.

In response to the recent incident, Ledger is warning users to be cautious of phishing attacks. Malicious phishing emails and smishing attempts using stolen contact information may increase. The company advises users never to share recovery codes or personal information with third parties and to verify the legitimacy of any suspicious contact through official channels.