Ledger Confirms Global-e Breach, Warns Users of Phishing Attempts

Ledger confirmed that an e-commerce partner, Global-e, suffered a breach that exposed customers' names, contact details, and order histories (but not passwords, payment data, or crypto recovery phrases). Threat actors quickly began targeted phishing campaigns impersonating Ledger and Global-e—using fake security alerts, malicious QR codes, and replacement-device offers—to trick victims into disclosing sensitive wallet information; Ledger warns customers it will never request recovery phrases or unsolicited hardware and is coordinating with Global-e to investigate.