Ledger Data Breach via Globale Exposes Contacts

On January 5, 2026, cryptocurrency hardware wallet provider Ledger disclosed a data breach affecting some of its customers, stemming from unauthorized access to systems operated by its third-party payment processor, Globale. The incident exposed names and contact information of individuals who had made purchases through Ledger's online store, but officials confirmed no financial details or wallet security credentials were compromised.

Globale, which handles order processing and acts as the merchant of record for Ledger's ecommerce operations, detected unusual activity in a portion of its cloud infrastructure. The company promptly implemented security controls to contain the breach and retained independent forensic experts for an investigation. The probe verified that attackers had accessed limited personal data related to customer orders, including full names and contact details. Globale notified affected customers directly via email, outlining the incident and assuring them that payment card information, bank details, passwords, and any cryptocurrency-related secrets remained secure.

Ledger emphasized that the breach occurred entirely within Globale's environment and did not...