The well-known hardware wallet manufacturer Ledger faced another security incident on January 5, 2026. Blockchain investigator ZachXBT reported that customers' personal data had been compromised. The cause was a vulnerability on the part of the third-party payment processor Global-e.
This event exacerbates concerns about security standards in the crypto industry. The leak occurred just a few days after Trust Wallet users faced unauthorized withdrawals. Additionally, earlier, attackers targeted clients of the MetaMask service.
Vulnerability in partner infrastructure
According to data from ZachXBT, affected users received notifications about the incident. The attackers gained unauthorized access to clients' names and contact details. Ledger representatives confirmed the detection of suspicious activity. The incident affected part of the cloud infrastructure related to the integration of the Global-e service.
The company promptly took measures to localize the threat. Independent forensic experts were brought in to investigate the circumstances of the breach and assess the security of the systems.
It is important to note that the funds in wallets and private keys were not compromised. However, analysts warn of secondary risks. Affected clients may become targets for social engineering campaigns. Compromised databases are often used to create convincing phishing emails.
Risks of using third-party services
The Ledger incident highlights the danger of reliance on external service providers for logistics and payment issues. When confidential information is handled by third parties, the attack surface significantly expands.
Continuous monitoring and strict vetting of partners become critically important conditions for operation. Only in this way can violations that undermine trust in individual companies and the digital asset ecosystem as a whole be prevented.
The current situation is reminiscent of events in 2020. At that time, attackers gained access to Ledger's e-commerce databases. As a result, personal information of hundreds of thousands of users was exposed. That breach led to a massive wave of fraud aimed at stealing recovery phrases.
Systemic security issues in the industry
Recurring incidents increase pressure on Ledger's management. The company is being called upon to tighten internal security protocols and review supplier management principles. There is also a need for more active efforts to educate clients on phishing protection methods.
News of the leak emerged just a few hours after attacks on MetaMask users. The attackers used fraudulent schemes imitating two-factor authentication (2FA) to steal seed phrases.
Moreover, less than two weeks ago, hackers breached the Trust Wallet extension for the Chrome browser. The damage from the criminals' actions was about $7 million. This incident prompted Binance founder Changpeng Zhao to suggest possible insider involvement.
Investigations revealed vulnerabilities in update channels and credential management. The combination of these events indicates systemic weaknesses in the industry. Supply chain risks and vendor breaches are becoming critical issues for wallet providers as cryptocurrency adoption grows.