Ledger Confirms Data Breach via Payment Processor, Assures Wallet Security

Ledger, the cryptocurrency hardware wallet manufacturer, disclosed a data breach affecting customer information through its e-commerce payment partner Global-e. The incident, detected on January 5, 2026, exposed names and contact details of users who made purchases via Ledger's online store. The company confirmed immediate isolation of compromised systems and collaboration with cybersecurity experts.

No private keys or wallet funds were compromised, as Ledger's cold storage architecture keeps keys offline. Global-e is directly notifying affected customers. This marks Ledger's second significant data incident, reigniting concerns about third-party vulnerabilities in crypto infrastructure.

Industry analysts note the breach underscores persistent security challenges despite blockchain's inherent protections. 'Custody solutions are only as strong as their weakest link,' remarked ZachXBT, who first flagged the leaked data. The event follows a 2020 breach where Ledger customer databases were hacked, later exploited in phishing attacks.