In early January 2026, hardware wallet maker Ledger disclosed that a third-party provider, Global-e, had suffered a security incident that exposed order data for customers of several brands, including Ledger. Global-e operates the cross‑border e‑commerce and logistics stack used to process many international orders on Ledger.com, and an unauthorized party gained access to a cloud-based system containing shopper order information. According to Ledger’s customer notice and subsequent reporting, the compromised data consisted of names, email addresses, phone numbers, postal addresses, and order details (such as items purchased and shipping information), but did not include crypto recovery phrases, private keys, PINs, Ledger Recover identity-verification data, or payment card information. The incident has been framed as a “commerce‑stack breach” rather than a compromise of Ledger devices or cryptographic systems, meaning users’ on‑chain assets are not directly affected. However, the exposure of a fresh list of confirmed hardware wallet buyers tied to real‑world addresses and contact channels creates elevated risks of targeted phishing, extortion, and physical threats, especially given Ledger’s history of a similar data breach in 2020 that later fueled harassment and scam campaigns. Security commentators and privacy firms have highlighted this breach as another example of third‑party supply‑chain risk in crypto infrastructure, warning that attackers are already using the leaked contact data to impersonate Ledger or Global‑e support and pressure victims into revealing seed phrases or other sensitive information.

AI-generated background, compiled from web sources — not editorial content.

More coverage

Explore the topic

Loading related coverage…

Explore the full feed

Comments

Loading comments…