Ledger said a recent customer data exposure was caused by a security incident at its third-party payment processor, Global-e, and did not involve Ledger’s own systems.

The hardware wallet maker said unauthorized access to Global-e’s cloud infrastructure led to the exposure of limited personal information, including names and contact details, belonging to some Ledger customers. Global-e disclosed the incident in an email to affected users, which was first shared publicly by blockchain investigator ZachXBT on X.

Global-e did not say how many customers were affected or when the breach occurred. The company said it detected unusual activity, quickly implemented controls, and launched an investigation that confirmed improper access to customer data.

“We retained independent forensic experts to investigate the incident and determined that some personal data, including name and contact information, were improperly accessed,” Global-e said in the notification.

Ledger said Global-e, which acts as the merchant of record for purchases made on Ledger.com, is the data controller and therefore handled customer communications.

“This was not a breach of Ledger’s platform, hardware or software systems, which remain secure,” Ledger said in a statement to CoinDesk. “The incident involved unauthorized access to order data within Global-e’s information systems related to customers who completed purchases using Global-e.”

The company emphasized that no payment information, recovery phrases, private keys or digital asset data were compromised, noting that Global-e does not have access to customers’ wallets or blockchain balances.

Ledger said it is working with Global-e to provide affected users with relevant updates and added that the incident impacted multiple brands whose order data was stored in the same Global-e cloud environment.

The disclosure follows earlier security incidents involving Ledger, including a 2020 customer data breach tied to e-commerce platform Shopify and a 2023 hack that resulted in losses of nearly $500,000 across several decentralized finance applications.

Ledger said it continues to work with partners across the industry to counter threats from hackers and other malicious actors.