{"id":"ledger-global-e-customer-breach-jan-2026","category":"breach","status":"closed","title":"Ledger customers' names and contact details exposed in Global-e breach","tldr":"A breach at checkout partner Global-e exposed names, contact details and order data for some Ledger buyers. Ledger said wallets and payment details were unaffected. Watch for impersonation scams and never share your 24-word recovery phrase.","summary":"Disclosed on 5 January 2026, this breach affected some people who bought through Ledger.com using Global-e to handle their purchase. Ledger said an unauthorised party accessed a Global-e cloud system holding shopper order data for several brands. Exposed Ledger customer information included names, contact details and order details such as products and prices. Ledger said its hardware, software and platform were unaffected, and that payment information and wallet recovery phrases were not exposed. Global-e said it isolated and secured the affected systems and was notifying potentially affected people and regulators. The Register reported related impersonation phishing on 6 January, although its report did not establish that the stolen records were used to select recipients. As of 3 November, no later confirmed development was found in the reviewed reporting. The intrusion date and affected-customer total remain undisclosed. The companies' statements were read as quoted in reporting; their official incident pages were inaccessible during this review.","action":"If you bought from Ledger.com, treat unexpected Ledger or Global-e messages, security-update links and replacement-device packages with suspicion. Never share your 24-word recovery phrase or enter it into a website. Open support.ledger.com yourself for help; there is no customer software patch for this data exposure.","product":"Ledger.com customer orders handled by Global-e","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["ledger","global-e","data-breach","crypto","phishing"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"Ledger customers impacted by third-party Global-e data breach — includes statements from both companies","url":"https://www.bleepingcomputer.com/news/security/ledger-customers-impacted-by-third-party-global-e-data-breach/amp/","by":"BleepingComputer","date":"2026-01-05"},{"kind":"news","title":"Ledger customers alerted to data leak at third-party e-commerce partner Global-e","url":"https://www.theblock.co/news/business/2026-01-05-ledger-customers-data-leak-payment-processor-384275","by":"The Block","date":"2026-01-05"},{"kind":"news","title":"Crypto wallet shop Ledger confirms customer data lifted in Global-e snafu","url":"https://www.theregister.com/security/2026/01/06/ledger-confirms-customer-data-lifted-after-global-e-snafu/2443622","by":"The Register","date":"2026-01-06"}],"started":"2026-01-05","closed":"2026-01-06","created":"2026-11-03T20:51:02.777Z","updated":"2026-11-03T20:51:02.777Z","cve_notes":[],"timeline":[{"at":"2026-01-06","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"The Register reported phishing impersonating Global-e and promoting a supposed Ledger security update. It also reported Ledger's warning against following instructions in unsolicited packages or using purported replacement devices.","url":"https://www.theregister.com/security/2026/01/06/ledger-confirms-customer-data-lifted-after-global-e-snafu/2443622","by":"The Register","patch":null},{"at":"2026-01-05T19:22Z","added":"2026-11-03T20:32:12.437Z","kind":"other","text":"In an update published by BleepingComputer, Global-e said it had isolated and secured the affected systems and was notifying potentially affected people and regulators. It said payment information and account credentials were not compromised.","url":"https://www.bleepingcomputer.com/news/security/ledger-customers-impacted-by-third-party-global-e-data-breach/amp/","by":"BleepingComputer","patch":null},{"at":"2026-01-05","added":"2026-11-03T20:32:12.437Z","kind":"disclosed","text":"Global-e notified customers that unauthorised access had exposed names and contact details associated with some Ledger.com purchases. Ledger said its own systems, payment information and wallet recovery phrases were unaffected; no affected-customer total was disclosed.","url":"https://www.theblock.co/news/business/2026-01-05-ledger-customers-data-leak-payment-processor-384275","by":"The Block","patch":"na"}],"url":"https://hard.fyi/live/ledger-global-e-customer-breach-jan-2026/","json":"https://hard.fyi/api/live?id=ledger-global-e-customer-breach-jan-2026"}