Ledger, a leading manufacturer of cryptocurrency hardware wallets, announced on January 5 that a data breach occurred at its payment processing partner Global-e, a company that handles international e-commerce transactions for Ledger’s online store.
Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & other contact information).
Earlier today customers received the email below. pic.twitter.com/RKVbv6BTGO
— ZachXBT (@zachxbt) January 5, 2026
According to Ledger, the incident was discovered after suspicious activity was detected within part of Global-e’s cloud infrastructure. The affected systems were immediately isolated, and an investigation was launched in coordination with external cybersecurity experts.
Ledger clarified that the compromised data is limited to order-related information from purchases made through its official online store. This includes customer names, contact details, and shipping addresses.
Private Keys and Wallet Funds Remain Safe
Ledger emphasized that the breach did not originate from Ledger’s own infrastructure. Crucially, the company stated that private keys, recovery phrases, wallet firmware, and on-chain crypto assets were not affected.
No credit card information, wallet balances, or transaction data were exposed in the incident.
Global-e, which stores checkout data for international orders, is directly notifying affected customers. At this stage, the exact number of impacted users has not been disclosed.
Ledger reiterated that its self-custody hardware wallet model remains secure, highlighting that cold wallets store private keys in offline environments, significantly reducing the risk of direct asset theft.
Third-Party Risks Highlight Ongoing Industry Challenge
The incident once again underscores the risks associated with third-party service providers in the cryptocurrency industry. This marks the second data-related incident involving Ledger customers since 2025, drawing attention to broader supply-chain security vulnerabilities across the sector.
Cybersecurity experts warn that leaked personal information could be exploited for targeted phishing or social engineering attacks, especially when combined with previously exposed data.
Ledger stressed that it will never ask users for their recovery phrase via phone, email, or messaging apps, urging customers to remain vigilant against scams.
Looking ahead, Ledger stated it will strengthen oversight of external vendors and reinforce monitoring procedures to restore and maintain customer trust.
The company also encouraged users to deepen their understanding of how cryptocurrencies work and the risks involved, reinforcing that informed self-custody remains a key pillar of digital asset security.
