Your customers’ data lives at your partners too
Ledger told customers their order details were exposed through its e-commerce partner. Your checkout provider holds the same kind of data.
Ledger, the hardware wallet maker, told customers this month that order data, names and contact details, was exposed through a breach at Global-e, a partner that runs parts of its online store. Ledger’s own systems weren’t the problem.
For a crypto wallet company, a list of buyers with home addresses is exactly what scammers want. Expect phishing emails and calls that quote real order details.
Most online shops have the same setup: payment provider, shipping company, email marketing tool, support desk. Each one holds a copy of your customers.
- List the partners that receive customer data, and what each one gets.
- Send them less. The shipping company needs an address, not a purchase history.
- Ask how they’ll notify you of a breach, and how fast.
- Prepare a short customer message in advance, so you can warn people the same day.
Customers don’t care whose server it was. They gave the data to you.