Another day of scamming using breach Ledger account

[SatsPH]

https://x.com/kchau/status/2050629931814830478

Another scam being pull off as as result of the breach early this year: Global-e Incident to Order Data - January 2026.

Surely this won't be the last so for those Ledger holders you are still going to be the target as your physical addresses is already in the hands of the criminals.

[OmegaStarScream]

Saw this (or a similar report) not a long time ago. A very valid reason to start buying hardware wallets from either physical stores (third party resellers) or online while using a package forwarding company, so your your address is not leaked even in case there is a security breach.

[tbct_mt2]

Another scam being pull off as as result of the breach early this year: Global-e Incident to Order Data - January 2026.

Surely this won't be the last so for those Ledger holders you are still going to be the target as your physical addresses is already in the hands of the criminals.

It can happen with purchases of other hardware wallets too but again, it's about Ledger wallet. It can be another coincidence to make reputation of Ledger wallet brand worse.

This guide for buying a hardware wallet the right way will be very helpful for anyone with plans and practice of buying a hardware wallet in the future.

Spending money for purchasing a hardware wallet is good intention but not enough, let's do it rightly by
Choosing a good hardware wallet (open source).
Buying it rightly.

[Charles-Tim]

For bitcoin users who do not really care about altcoins, I will only recommend wallet on airgapped devices like Electrum. Hardware wallets come with reduced privacy which I do not like.

Also scam due to lack of privacy is not ruled out.

It also goes to going for metal backups, steel washers are better for privacy reasons instead of crypto seed phrase backup ones. The metal backups does not need to be called bitcoin or crypto.

[bitmover]

Saw this (or a similar report) not a long time ago. A very valid reason to start buying hardware wallets from either physical stores (third party resellers) or online while using a package forwarding company, so your your address is not leaked even in case there is a security breach.

I think it is saver to receive in a mailbox or a locker somewhere, if such service is available

Because third party are not the best solution for hardware wallets. I would feel much safer buying from the manufacturer.

[mikel_012]

For how long will this happen?

There are no infinite number of Ledger customers, so they can not keep sending mail week after week and expect for people to fall again and again. At one point there will be no way to scam the customers from the data leak, or am I wrong?

[dkbit98]

This ledger scam shitshow is neverending circus show 
Now they moved to quantum resistance and problem for me is when they are sending this letters to physical home addresses.
I can easily stop using ledger crap, but it's now that easy to change home address and stop receiving letters in your mailbox.

[Nwada001]

They are never going to stop those scammers who have access to the Ledger customer data; they will keep on pulling new types of scams just to try their luck. The best is for Ledger to run some awareness campaign if they have not warned all customers never to accept anything that comes through a particular way; maybe only official mail from Ledger should be taken seriously, and there is no time they are ever going to ask them to scan any QR code anywhere.

[Cricktor]

For how long will this happen?

It seems there's an endless supply of different scammers who beat the dead horse. They don't care if you received such a letter the gazillion's time.

I can easily stop using ledger crap, but it's now that easy to change home address and stop receiving letters in your mailbox.

now +not

I would be very pissed off to receive such letters because I've seen examples with a big Ledger logo or print and whatnot else on the outside of the envelope of this physical letter scam crap. You don't know who is your postman and what kind of people are their contacts, "friends" and so on.

Postmen aren't the best paid workers and unfortunately I've seen some specimen far from being trustworthy.

Apologies to all good and hard working postmen who do their job with great dedication and reliability. I had those, too, and I miss them.

Fortunately I can call myself lucky to have never purchased any Ledger hardware shit and therefore didn't suffer from the personal data leak by them.

[Lontor]

Sadly people will keep falling into this scams, because they refuse to do their due diligent research first, there are too many dumb people in the world even while technology keeps evolving they failed to evolve.

Buying a hardware wallet is the best thing you can do for yourself.
Just learn how to use it right.

And this is where there is huge problem, many people won't learn how to.
They will even prefer if someone is helping them to keep those assets or operate their hardware wallet for them.

[tabas]

Although that's not something new, I've seen also one before like a year ago IIRC. But these scammers never gets tired of this tactic. While I cannot read the letter, it probably is redirecting the victims to that QR code that will have a form for them to sign their recovery seeds. We can't be a victim of it anymore although sadly, there will always be those people who are not aware of this scam. They'd feel scared that they should do some actions in it and that's why they will obliged themselves to follow what's written in the instruction willingly.

[PrivacyG]

I did not even know they had ANOTHER LEAK this year.  I can not believe it.  I mean I can.  But I would rather not.

Receiving letters asking you to insert your Seed on a web page is the best thing that can happen to the customers affected by this leak.  I would much rather receive a false Ledger letter than a five Dollar wrench in my door knob or worse.

[noorman0]

For how long will this happen?

There are no infinite number of Ledger customers, so they can not keep sending mail week after week and expect for people to fall again and again. At one point there will be no way to scam the customers from the data leak, or am I wrong?

They'll send letters until they run out of paper, while they devise other, more cost-effective and time-efficient methods. Essentially, this scam won't stop as they learn new methods; they already have user data, and that's the main problem.

[cryptomaniac_xxx]

I did not even know they had ANOTHER LEAK this year.  I can not believe it.  I mean I can.  But I would rather not.

Receiving letters asking you to insert your Seed on a web page is the best thing that can happen to the customers affected by this leak.  I would much rather receive a false Ledger letter than a five Dollar wrench in my door knob or worse.

They have. The thing is that even if their customers ditches out their Ledger, they can still be the target as their data base been leak already.

So it make sense for Ledger owner to just be very careful of everything they received for Ledger and be aware that there are scammers out there using Ledger and their data. This is just the sad state that once your data has been leak, there's no way of getting it back and you are no longer private and anonymous but a target physically and in online.

[Lucius]

I did not even know they had ANOTHER LEAK this year.  I can not believe it.  I mean I can.  But I would rather not.

People who have proven that they cannot protect their clients' data are not the ones to be trusted after 2020. Still, some want to learn from their own mistakes, and these will follow them for most of their lives (unless they change their name and address).

Code:

https://protos.com/ledger-confirms-customer-data-leaked-in-third-party-global-e-breach/

Receiving letters asking you to insert your Seed on a web page is the best thing that can happen to the customers affected by this leak.  I would much rather receive a false Ledger letter than a five Dollar wrench in my door knob or worse.

I wouldn't agree with you, because first you take the line of least resistance, and then you resort to some more violent measures. Just because someone received a letter doesn't mean that nothing will happen after that. Anyone who cares about the safety of themselves and their loved ones should never buy an Ledger device, or any other hardware wallet using their real data.