Ledger users hit by Jan. 5 Global-e data breach exposing personal details but not crypto funds

On Jan. 5, Ledger informed customers that a breach at its third‑party payment processor Global‑e exposed names, contact details, and order information, while leaving hardware wallets, passwords, and 24‑word recovery phrases untouched. Although no crypto assets were directly compromised, past incidents show that such personal data dumps can fuel long‑running phishing, extortion, and even physical robbery attempts that target confirmed hardware wallet owners. The latest leak renews scrutiny of the broader commerce infrastructure around self‑custody and highlights the offline risks created when shipping and billing data is linked to crypto holdings.