Ledger customers alerted to fresh data leak tied to payment processor

Ledger customers have been alerted to a new data exposure involving personal information after a third-party payment processor used by the company experienced a security incident, according to emails seen by The Block on Monday.

The alert, which circulated widely on social media after being posted by blockchain investigator ZackXBT, said that Global-e — a payments and logistics provider used by Ledger for international transactions — had suffered a data exposure affecting customer information. The email said the compromised data included customer names and other contact details, though it did not specify the total number of affected users.

Ledger has not issued a public statement detailing the breach or its scope. As such, how long the data was accessible, and whether additional information was affected, remain unclear.

The Block has reached out to the company for comment.

Ledger is best known as a maker of hardware wallets, which are physical devices designed to store users’ cryptocurrency private keys offline. The company has positioned its products as a security-focused alternative to software wallets and centralized exchanges, serving both retail and institutional crypto users globally.

The incident has surfaced against the backdrop of Ledger’s long and contentious history with customer data leaks.

In 2020, a database containing the personal information of more than 270,000 Ledger customers was published on hacking forum RaidForums after attackers accessed marketing and e-commerce data tied to the company. The leak exposed names, email addresses, phone numbers, and, in some cases, home addresses, triggering widespread concern and reports of phishing attempts and harassment.

Ledger later offered a bitcoin bounty for information related to data attacks, but the fallout continued. A class-action lawsuit was subsequently filed against Ledger and e-commerce partner Shopify over the 2020 breach, arguing that inadequate data protections had put customers at risk.

While it remains unclear whether the latest incident is comparable in scale to the 2020 breach, the episode is likely to renew scrutiny of how crypto firms and their third-party service providers handle customer data, particularly as hardware wallet companies market security as a core differentiator.