Ledger Wallets Secure After Global-e Data Breach
Ledger, a hardware wallet manufacturer for digital currencies, has confirmed that its systems and users’ crypto holdings remain secure following a data breach at its e-commerce partner, Global-e. The incident, announced on January 5, involved unauthorized access to Global-e’s cloud-based systems, which manage order processing for purchases made on Ledger.com.
Global-e Breach Details
The breach affected Global-e’s systems, which have been integrated with Ledger since October 2023. Ledger emphasized that its own platform, devices, and users’ crypto wallets were not compromised. However, some customer data from Ledger.com purchases, processed by Global-e as the Merchant of Record, was accessed.
Global-e detected unusual activity in its cloud infrastructure, promptly halted it, and engaged third-party forensic experts to investigate. The experts found that the leaked data included basic personal information, such as names and contact details. Notably, sensitive data like dates of birth, gender, government ID numbers, and financial information remained secure.
Read Also: China’s economy slows despite export-driven growth
Ledger’s Security Measures
Ledger reiterated that its hardware wallets are designed to be self-custodial, ensuring users maintain control of their private keys and 24-word seed phrases. Global-e does not have access to these critical components, nor does it hold any user’s blockchain balance or digital asset secrets.
Broader Context and User Vigilance
This breach follows a series of high-profile hacks targeting major platforms like Coinbase and Binance, which exposed consumer data often used in phishing schemes. Users of affected platforms should remain vigilant against potential scams, as the exposed data could be exploited by malicious actors.
The breach at Global-e affected more than just Ledger. The unauthorized access extended to shopper order data from multiple companies.
