Scammers Stole Personal Data of Ledger Crypto Wallet Users

RBK-cryptoPubblicato 2026-01-05Pubblicato ultima volta 2026-01-05

Introduzione

Summary: Cryptocurrency hardware wallet manufacturer Ledger has suffered another data breach, this time through its e-commerce payment partner, Global-e. According to crypto investigator ZachXBT, the incident compromised users' personal data, including names and contact information. An email shared by ZachXBT, reportedly sent to affected users, stated that Global-e detected suspicious activity and that an unauthorized party had accessed certain personal data. At the time of reporting, Ledger had not yet released an official statement with details of the incident. This is not Ledger's first breach; in 2020, the data of over 270,000 customers was compromised, which led to years of targeted phishing attempts against users. The summary also notes that the American exchange Coinbase faced a major data breach in 2025, causing an estimated hundreds of millions of dollars in damage.

Another data breach of users of the popular crypto wallet manufacturer Ledger has occurred through the payment system Global-e. As reported by crypto detective ZachXBT, the incident resulted in the disclosure of customers' personal data, including names and contact information.

ZachXBT shared a fragment of an email received by some users:

"Suspicious activity was detected in a part of our network at Global-e. We took steps to isolate and secure our systems. We engaged independent digital forensics experts to investigate the incident and determined that there was unauthorized access to some personal data, including name and contact information."

No official statement from Ledger with details of the incident has been published at the time of writing.

As stated on the crypto wallet manufacturer's website, Global-e offers e-commerce solutions. Since October 9, 2023, Ledger has been using the Global-e platform to sell Ledger products through the official Ledger website.

In 2020, the company already reported a data compromise of over 270 thousand wallet buyers, including delivery addresses, their phone numbers, and email addresses. It was reported that after the incident, the personal information of 4,865 users from Russia, among others, became publicly available.

After the incident, for several years, Ledger users received phishing mailings electronically and even in paper form. The goal of these letters was to obtain additional information that could lead to the theft of cryptocurrency.

A major user data leak in 2025 also affected the American crypto exchange Coinbase, where, according to expert estimates, the damage amounted to several hundred million dollars.

What will happen to the regulation of the cryptocurrency market in Russia in 2026

Bitcoin turned 17 years old

Bitcoin as 'digital gold': what an investor should know

Domande pertinenti

QWhat company experienced a recent data breach affecting users of its crypto wallet?

ALedger, the manufacturer of a popular crypto wallet, experienced a data breach through its payment system, Global-e.

QWhich payment system was the source of the Ledger user data leak?

AThe data leak occurred through the Global-e payment system, which Ledger uses for e-commerce and product sales on its official website.

QWhat type of user information was compromised in the Ledger data breach according to the email shared by ZachXBT?

AThe compromised information included users' names and contact information.

QHad Ledger experienced a similar data security incident prior to this one?

AYes, in 2020, Ledger reported a data breach that compromised the information of over 270,000 customers, including delivery addresses, phone numbers, and email addresses.

QWhat was a long-term consequence for users after Ledger's 2020 data breach?

AFor several years after the 2020 incident, Ledger users received phishing messages via email and even physical mail, aimed at stealing additional information to facilitate cryptocurrency theft.

Letture associate

Behind ZEC's Over 30% Plunge: An 'Unlimited Minting' Vulnerability with No Way to Prove if It Was Ever Exploited

A critical vulnerability was discovered in Zcash's Orchard privacy pool, allowing for the theoretical creation of undetectable counterfeit ZEC. Researcher Taylor Hornby found the flaw on May 29th, 2024, within the Orchard circuit's cryptographic constraints, which could let an attacker bypass asset conservation rules. Although a rapid emergency fix was deployed within days via a coordinated soft and hard fork, a core uncertainty remains: due to Orchard's privacy features, it is impossible to cryptographically prove whether this "unlimited mint" flaw was exploited in the nearly four years since the pool's 2022 launch. This uncertainty, rather than the patched flaw itself, triggered a market panic, causing ZEC's price to drop over 30%. While the Zcash Foundation stated no evidence of exploitation was found, independent entity Shielded Labs emphasized the impossibility of definitively proving no counterfeit ZEC was ever created. The incident highlights the unique trust challenge in privacy systems. To address this, developers are proposing a new network upgrade with enhanced auditing to allow verifiable proof of supply integrity. Notably, the researcher utilized the newly released AI model Claude Opus 4.8 as a tool during the security review, signaling the growing role of advanced AI in uncovering complex cryptographic vulnerabilities.

marsbit3 min fa

Behind ZEC's Over 30% Plunge: An 'Unlimited Minting' Vulnerability with No Way to Prove if It Was Ever Exploited

marsbit3 min fa

imToken's 10th Anniversary Unveils Strategic Direction for the Next Decade: Evolving from a Trusted Main Wallet to a Personal Digital Hub

On its tenth anniversary, decentralized wallet imToken announced its strategic vision for the next decade: evolving from a "trusted main wallet" into a "personal control interface." This new direction aims to help users manage not only digital assets but also identity, permissions, and AI agent actions in an increasingly open and intelligent internet. imToken outlined that while the past decade focused on Store, Send, and Stake—securing assets, enabling transfers, and facilitating network participation—the future introduces a fourth core proposition: Sign. This expanded concept goes beyond transaction signing to encompass expressing intent, granting permissions, setting rules, delegating actions, and revoking authorizations. As AI agents gain autonomy, imToken emphasizes the need for clear, verifiable, and revocable user control over their actions. CEO Ben He stated that imToken's mission is shifting from enabling ownership of digital assets to ensuring user sovereignty over their entire digital world in the AI era. The company's core principle has been upgraded from "Digital Assets, Under Your Control" to "Your Digital World, Under Your Control." Future development will focus on three areas: upholding self-custody principles, extending security from transactions to authorizations and automated actions, and building product capabilities for managing permissions, delegations, policies, and revocations. imToken views the wallet's role as expanding into a trusted control interface for human-AI collaboration, where managing keys, signatures, and permissions forms the infrastructure for personal digital sovereignty. Founded in 2016, imToken serves millions of users across 150+ countries, providing non-custodial wallet services supporting over 50 blockchain networks.

marsbit5 min fa

imToken's 10th Anniversary Unveils Strategic Direction for the Next Decade: Evolving from a Trusted Main Wallet to a Personal Digital Hub

marsbit5 min fa

With 300 Million Financing to Accumulate ETH, the Hidden Concerns Behind BitMine's High-Yield Preferred Shares

BitMine, led by Thomas Lee, plans to raise up to $300 million through an initial public offering of 3 million shares of perpetual Series A preferred stock on the NYSE (ticker: BMNP). The stock offers a fixed 9.5% annual dividend. The funds are intended to further the company's accumulation of Ethereum, expand its staking node operations, and for general corporate purposes. This move comes as BitMine faces significant challenges. Its massive Ethereum holdings, over 5.3 million ETH (roughly 4.5% of circulating supply), are currently at an unrealized loss exceeding $8.5 billion due to the crypto market downturn. The company's core business model relies on staking these ETH holdings to generate yield, which it presents as the primary means to cover the new, substantial annual dividend obligation of approximately $28.5 million if the offering is fully subscribed. While the model is similar to MicroStrategy's bitcoin-focused strategy of using capital markets to fund crypto acquisitions, BitMine's product differs with its fixed, non-adjustable dividend rate. The company acknowledges risks, stating dividend payments could also come from cash reserves, asset sales, or future financing, and warns that staking yields may underperform or be illiquid during market stress. The 9.5% fixed rate reflects the higher risk premium demanded from investors for a company heavily exposed to Ethereum's volatility.

Foresight News8 min fa

With 300 Million Financing to Accumulate ETH, the Hidden Concerns Behind BitMine's High-Yield Preferred Shares

Foresight News8 min fa

A Year of Observing Agent Payments: The Cold Reality Behind the Hot Narrative

A Year in Agent Payments: The Cold Reality Behind a Hot Narrative This article examines the current state of "Agent payments," a year after it became a major trend at the intersection of AI, payments, and crypto. Despite significant investments from major players like Stripe, Visa, and Google, the author—having built products and spoken with merchants and developers—finds genuine, large-scale demand still lacking. Key findings across several hyped scenarios reveal structural challenges: * **Agent-to-Merchant Commerce:** For most product categories (e.g., clothing, electronics), AI shopping via chat is inferior to traditional visual e-commerce. Merchant interest is largely defensive, focused on future-proofing rather than current consumer demand. True potential exists only in specific, high-frequency/low-decision scenarios (like food orders) or for simplifying broken checkout experiences, but these require massive consumer distribution, favoring incumbents. * **Agent-to-API/Machine Commerce:** While stablecoin micropayments are touted for API calls, developers already solve small-value payments via prepaid credits and subscriptions. Large SaaS providers prefer enterprise contracts over fragmented micro-pricing. The market exists for long-tail services outside the top providers but is inherently smaller than the hype suggests. * **Agent-to-Agent Payments:** This remains a theoretical long-term vision with negligible real transaction volume. The core challenges—discovery, trust, negotiation, dispute resolution—are unsolved. While the potential for a new, high-speed settlement layer is real, it is not the current market. * **Agent Finance:** This is the sole area with existing, paying customers (fund managers, DeFi users). AI enhances real-time monitoring and autonomous rebalancing, offering real capability gains. However, competition favors established, regulated institutions with existing licenses and client relationships. The author concludes that the core deficiency in the Agent economy is not merely a payment layer, but a more complex **coordination** capability—figuring out how Agents and humans work together, verify task completion, and settle outcomes. Payment is just one component of settlement, which is itself part of coordination. For large companies, investing now is a defensive, long-term bet with minimal cost. For startups, however, the imperative is to find markets that exist today, not wait for a future wave that remains on the horizon.

marsbit10 min fa

A Year of Observing Agent Payments: The Cold Reality Behind the Hot Narrative

marsbit10 min fa

China's First Embodied Data Compliance Outbound: How Does Paxini Become a Game-Changer for Industry Development?

"Embodied Intelligence Data Compliance Goes Global: A Breakthrough Moment. At the 2026 World Intelligent Industry Expo, Paxini, the sole Chinese company authorized for cross-border embodied data transfer, launched a pioneering project in Tianjin. This marks the first officially approved case of its kind in China, resolving a major industry bottleneck for compliant international data flow. As the ultimate direction of AI evolution, embodied intelligence relies on vast, multi-modal physical world interaction data. Despite booming global demand, stringent compliance had previously trapped the domestic industry. Paxini's breakthrough establishes a formal compliance framework, setting a benchmark for standardized development. The core of Paxini's success lies in its industry-leading data infrastructure and compliant security architecture, aligning with national data strategy. It operates a large-scale 'data collection factory' for high-quality, multi-modal data and has established a full-chain compliant pathway from 'collection-processing-certification-outbound transfer'. This dual advantage in data scale/quality and compliance secures its leadership. Beyond immediate commercial impact, the project signifies long-term strategic value: international market validation from top-tier financial institutions and the compounding benefits of ecosystem building. High-quality physical world data possesses enduring value. By solving fundamental infrastructure and compliance challenges, Paxini not only contributes a 'Chinese model' to the global embodied intelligence industry but also solidifies a key competitive moat for the long haul. This enables safe, efficient global flow of China's quality embodied data, amplifying its influence in the intelligent manufacturing landscape."

marsbit11 min fa

China's First Embodied Data Compliance Outbound: How Does Paxini Become a Game-Changer for Industry Development?

marsbit11 min fa

Trading

Spot

Futures