Ledger Faces New Data Breach via Third-Party Handler, ZachXBT Alerts Users
On January 4, 2026, blockchain investigator ZachXBT exposed a fresh data breach affecting hardware wallet provider Ledger. The incident stemmed from a cloud-system vulnerability at third-party payment processor Global-e, which notified customers of "unusual activity." Compromised data includes names and contact details of Ledger buyers—though wallet seeds and crypto assets remain secure.
Global-e claims to have contained the breach and enlisted forensic experts to investigate. This marks Ledger's second major security lapse since July 2020, when hackers leaked over 1 million emails and 272,000 full customer profiles, fueling years of phishing attacks. Users are advised to scrutinize communications for potential scams.