just saw ledger dealing with another data breach situation. this time it's through their payment processor global-e, not their actual platform. so apparently some customer info like names and contact details got exposed from global-e's cloud system. the company's being pretty vague about how many people got hit though.

what caught my attention is ledger emphasizing that this wasn't a breach of their hardware or software - the actual ledger devices and your private keys are totally fine. they're saying global-e is the one who messed up since it's their merchant of record. payment info wasn't even compromised in this one.

this is rough timing for them though. they already had that 2020 shopify breach affecting 270k customers, then got hacked for like $500k back in 2023. feels like third-party integrations keep being the weak link. global-e says they've brought in forensic experts and tightened up access controls, but still doesn't answer how many ledger users were actually affected. kinda wild that other brands using global-e got hit too, so it's not just a ledger problem.

anyway, if you use ledger, they're saying to stay vigilant but your crypto is secure since it's self-custodial. just another reminder that even big players in the space have these third-party risks.