Ledger: 105,000 French cryptocurrency holders exposed

On 4 April 2026, Ledger — the French maker of crypto hardware wallets — was again in the spotlight when a database covering roughly 105,000 of its French customers was put back up for sale on a cybercrime forum, reportedly priced at around $68,000.

The records did not come from a fresh compromise of Ledger itself. They originate from the January 2026 breach of Global-e, the third-party e-commerce and payment provider that acts as merchant of record for orders placed on Ledger.com. Global-e's cloud information system was accessed without authorization, exposing order data for customers who had purchased Ledger products, with the affected orders dating from late 2025 to early 2026. Ledger and Global-e notified impacted users on 5 January 2026.

Exposed data categories include:

• Full name
• Postal address
• Email address
• Phone number

According to Ledger and Global-e, payment card details were not affected, and the incident did not touch Ledger hardware devices, the Ledger Live software, or customers' recovery phrases or wallets. The danger is contextual: because the leaked contacts are confirmed crypto-wallet owners, the data is highly valuable for targeted phishing, extortion and social-engineering campaigns. The April resale illustrates a common breach lifecycle, with stolen data continuing to circulate and generate profit for threat actors months after the original incident.