Ledger Experiences Another Data Breach — Customer Names and Contact Information Exposed

Ledger Experiences Another Data Breach — Customer Names and Contact Information Exposed

Ledger, a well-known manufacturer of hardware wallets, has faced another data breach, reigniting concerns over customer privacy and third-party risks in the cryptocurrency sector.

Key Takeaways:

Ledger’s customer information was compromised due to a hack on its payment processor, Global-e.
No sensitive financial data or wallet security details were reported to be exposed.
Past incidents have led to ongoing phishing attacks targeting Ledger customers.
The recent breach reflects broader issues in crypto security, particularly with vendor-related vulnerabilities.

Ledger Breach Heightens Phishing Alarm Despite Wallet Security Intact

On January 5, 2026, blockchain researcher ZachXBT disclosed that personal information of Ledger's customers was accessed during a hack involving Global-e, a payment processor utilized by Ledger.

Following the breach, affected customers received alerts from Global-e about suspicious activities in its cloud services. The payment processor reported it acted swiftly to secure its systems and engaged external forensic experts to investigate.

Despite the breach, Ledger assured users that no payment card details, passwords, recovery phrases, or private keys were compromised. The company stated that the breach occurred at the level of a third-party partner, not within the core security of its hardware wallets.

While customer funds are reported to be secure, security experts and community members have raised alarms that the data exposure may lead to increased risks of phishing and social engineering attacks, especially considering Ledger's previous incidents.

This occurrence is particularly concerning in light of recent attacks affecting Trust Wallet users and MetaMask users, where unauthorized fund withdrawals took place due to compromised browser extensions.

Recurring Data Breaches Highlight Lasting Risks for Ledger Clients

Ledger has a significant reputation in discussions about data breaches due to the consequences of its 2020 incident, which leaked approximately 1.1 million email addresses and detailed personal data of around 292,000 customers. Following that data breach, the information was shared publicly, resulting in years of phishing campaigns, extortion attempts, and even physical threats against known cryptocurrency holders.

In addition to this latest breach, Ledger encountered other security challenges in December 2023 when its Connect Kit JavaScript library was compromised, leading to nearly $500,000 in losses for users interacting with affected decentralized applications.

Experts emphasize that while the hardware wallets remain secure, the continual leaks of customer information pose long-term risks that extend beyond immediate financial damage. Exposed personal data is often employed in sophisticated phishing schemes utilizing fake emails, messages, and even physical letters.

In April 2025, Ledger users received fraudulent mail designed to appear legitimate, prompting them to scan QR codes and provide their 24-word recovery phrases — a scam confirmed as false by the company. These attempts were traced back to data sourced from earlier breaches, showcasing the lasting consequences of such incidents.

The Ledger situation ties into a broader trend seen in the industry, with other companies like crypto tax software provider Koinly warning users that their email addresses and basic profile information may have been leaked following a hack on the analytics firm Mixpanel in December 2025.

Supply chain vulnerabilities are frequently identified by investigators and regulators as significant security gaps in the crypto landscape, where attackers often target vendors with access to user data rather than core systems. Despite reports of an 83% reduction in phishing-related losses in 2025, attackers continue to be adaptable, often increasing their efforts during market activity spikes while becoming less active during slower periods.