In short
- International-e, Ledger's e-commerce companion, skilled unauthorized entry to order knowledge methods affecting some Ledger.com prospects.
- No crypto belongings, safety phrases, blockchain balances, or fee info have been compromised within the breach.
- Ledger has employed unbiased forensic specialists to research the incident on the third-party platform.
Crypto pockets maker Ledger confirmed that its International-e e-commerce companion has suffered an information breach, however cautioned customers that its personal {hardware} and software program wallets stay safe.
Ledger, which relies in Paris, has been making and promoting crypto wallets for 12 years. The corporate has bought greater than 7.5 million gadgets, and estimates that its {hardware} and software program are getting used to custody roughly 20% of the world’s crypto belongings.
“This incident consisted of unauthorized entry to order knowledge in International-e info methods. A number of the knowledge accessed as a part of this incident pertained to prospects who made a purchase order on Ledger.com utilizing International-e as a service provider of document,” a Ledger spokesperson instructed Decrypt in an emailed assertion.
International-e is a world e-commerce and fee platform that helps manufacturers promote their merchandise internationally. It’s headquartered in Israel and trades on the Nasdaq beneath the GLBE ticker. It’s utilized by a whole bunch of different retailers, together with Victoria’s Secret, Adidas, Alo Yoga, and Marc Jacobs.
The assertion added that as a result of Ledger merchandise are self-custodial, International-e doesn’t have entry to buyer info like 24-word safety phrases, crypto balances, or every other personal information associated to digital belongings. “Importantly, no fee info was concerned,” the corporate added.
Ledger additionally mentioned in an announcement despatched to its customers that it has retained “unbiased forensic specialists to conduct an investigation into the incident.”
That is the most recent in a string of security-related alerts related to third-party methods linked to Ledger and its gadgets, which embody the Stax and Nano {hardware} wallets.
In December 2023, the corporate reported unauthorized entry and malicious code in its Ledger join Package. The corporate warned prospects on the time to “cease utilizing dapps,” and defined that the exploit occurred as a result of a former worker fell sufferer to a phishing rip-off.
