Another day of scamming using breach Ledger account

[SatsPH]

https://x.com/kchau/status/2050629931814830478

Another scam being pull off as as result of the breach early this year: Global-e Incident to Order Data - January 2026.

Surely this won't be the last so for those Ledger holders you are still going to be the target as your physical addresses is already in the hands of the criminals.

[OmegaStarScream]

Saw this (or a similar report) not a long time ago. A very valid reason to start buying hardware wallets from either physical stores (third party resellers) or online while using a package forwarding company, so your your address is not leaked even in case there is a security breach.

[tbct_mt2]

Another scam being pull off as as result of the breach early this year: Global-e Incident to Order Data - January 2026.

Surely this won't be the last so for those Ledger holders you are still going to be the target as your physical addresses is already in the hands of the criminals.

It can happen with purchases of other hardware wallets too but again, it's about Ledger wallet. It can be another coincidence to make reputation of Ledger wallet brand worse.

This guide for buying a hardware wallet the right way will be very helpful for anyone with plans and practice of buying a hardware wallet in the future.

Spending money for purchasing a hardware wallet is good intention but not enough, let's do it rightly by
Choosing a good hardware wallet (open source).
Buying it rightly.

[Charles-Tim]

For bitcoin users who do not really care about altcoins, I will only recommend wallet on airgapped devices like Electrum. Hardware wallets come with reduced privacy which I do not like.

Also scam due to lack of privacy is not ruled out.

It also goes to going for metal backups, steel washers are better for privacy reasons instead of crypto seed phrase backup ones. The metal backups does not need to be called bitcoin or crypto.

[bitmover]

Saw this (or a similar report) not a long time ago. A very valid reason to start buying hardware wallets from either physical stores (third party resellers) or online while using a package forwarding company, so your your address is not leaked even in case there is a security breach.

I think it is saver to receive in a mailbox or a locker somewhere, if such service is available

Because third party are not the best solution for hardware wallets. I would feel much safer buying from the manufacturer.

[mikel_012]

For how long will this happen?

There are no infinite number of Ledger customers, so they can not keep sending mail week after week and expect for people to fall again and again. At one point there will be no way to scam the customers from the data leak, or am I wrong?

[dkbit98]

This ledger scam shitshow is neverending circus show 
Now they moved to quantum resistance and problem for me is when they are sending this letters to physical home addresses.
I can easily stop using ledger crap, but it's now that easy to change home address and stop receiving letters in your mailbox.

[Nwada001]

They are never going to stop those scammers who have access to the Ledger customer data; they will keep on pulling new types of scams just to try their luck. The best is for Ledger to run some awareness campaign if they have not warned all customers never to accept anything that comes through a particular way; maybe only official mail from Ledger should be taken seriously, and there is no time they are ever going to ask them to scan any QR code anywhere.

[Cricktor]

For how long will this happen?

It seems there's an endless supply of different scammers who beat the dead horse. They don't care if you received such a letter the gazillion's time.

I can easily stop using ledger crap, but it's now that easy to change home address and stop receiving letters in your mailbox.

now +not

I would be very pissed off to receive such letters because I've seen examples with a big Ledger logo or print and whatnot else on the outside of the envelope of this physical letter scam crap. You don't know who is your postman and what kind of people are their contacts, "friends" and so on.

Postmen aren't the best paid workers and unfortunately I've seen some specimen far from being trustworthy.

Apologies to all good and hard working postmen who do their job with great dedication and reliability. I had those, too, and I miss them.

Fortunately I can call myself lucky to have never purchased any Ledger hardware shit and therefore didn't suffer from the personal data leak by them.

[Lontor]

Sadly people will keep falling into this scams, because they refuse to do their due diligent research first, there are too many dumb people in the world even while technology keeps evolving they failed to evolve.

Buying a hardware wallet is the best thing you can do for yourself.
Just learn how to use it right.

And this is where there is huge problem, many people won't learn how to.
They will even prefer if someone is helping them to keep those assets or operate their hardware wallet for them.

[tabas]

Although that's not something new, I've seen also one before like a year ago IIRC. But these scammers never gets tired of this tactic. While I cannot read the letter, it probably is redirecting the victims to that QR code that will have a form for them to sign their recovery seeds. We can't be a victim of it anymore although sadly, there will always be those people who are not aware of this scam. They'd feel scared that they should do some actions in it and that's why they will obliged themselves to follow what's written in the instruction willingly.

[PrivacyG]

I did not even know they had ANOTHER LEAK this year.  I can not believe it.  I mean I can.  But I would rather not.

Receiving letters asking you to insert your Seed on a web page is the best thing that can happen to the customers affected by this leak.  I would much rather receive a false Ledger letter than a five Dollar wrench in my door knob or worse.

[noorman0]

For how long will this happen?

There are no infinite number of Ledger customers, so they can not keep sending mail week after week and expect for people to fall again and again. At one point there will be no way to scam the customers from the data leak, or am I wrong?

They'll send letters until they run out of paper, while they devise other, more cost-effective and time-efficient methods. Essentially, this scam won't stop as they learn new methods; they already have user data, and that's the main problem.

[cryptomaniac_xxx]

I did not even know they had ANOTHER LEAK this year.  I can not believe it.  I mean I can.  But I would rather not.

Receiving letters asking you to insert your Seed on a web page is the best thing that can happen to the customers affected by this leak.  I would much rather receive a false Ledger letter than a five Dollar wrench in my door knob or worse.

They have. The thing is that even if their customers ditches out their Ledger, they can still be the target as their data base been leak already.

So it make sense for Ledger owner to just be very careful of everything they received for Ledger and be aware that there are scammers out there using Ledger and their data. This is just the sad state that once your data has been leak, there's no way of getting it back and you are no longer private and anonymous but a target physically and in online.

[Lucius]

I did not even know they had ANOTHER LEAK this year.  I can not believe it.  I mean I can.  But I would rather not.

People who have proven that they cannot protect their clients' data are not the ones to be trusted after 2020. Still, some want to learn from their own mistakes, and these will follow them for most of their lives (unless they change their name and address).

Code:

https://protos.com/ledger-confirms-customer-data-leaked-in-third-party-global-e-breach/

Receiving letters asking you to insert your Seed on a web page is the best thing that can happen to the customers affected by this leak.  I would much rather receive a false Ledger letter than a five Dollar wrench in my door knob or worse.

I wouldn't agree with you, because first you take the line of least resistance, and then you resort to some more violent measures. Just because someone received a letter doesn't mean that nothing will happen after that. Anyone who cares about the safety of themselves and their loved ones should never buy an Ledger device, or any other hardware wallet using their real data.

[promise444c5]

They are using random methods too now, apart from the ledger targets . Anyone who received such still need to question the fact these people know their address and could have thought they own some crypto.

Owning ledger is worse and I know some folks aren’t ready to listen, they still upgrade and keep  buying, I hope they don’t learn the hard way.

[NeuroticFish]

Surely this won't be the last so for those Ledger holders you are still going to be the target as your physical addresses is already in the hands of the criminals.

I had Ledger wallet. Actually I still have it somewhere unused. Bought online from Ledger webshop.

I don't think I've ever got physical mails from scammers, but for quite a number of years I did receive - now and then - various "interesting" scam emails.
But they've stopped. For years now.

So let's say you are not entirely correct about "surely this won't be the last"

[PrivacyG]

I wouldn't agree with you, because first you take the line of least resistance, and then you resort to some more violent measures. Just because someone received a letter doesn't mean that nothing will happen after that. Anyone who cares about the safety of themselves and their loved ones should never buy an Ledger device, or any other hardware wallet using their real data.

Of course running away from Ledger is the best idea but I still think it is much better to only receive a false mail than the wrench.  The best is not receiving any of the two, but has any of these known fake mail cases ended more violently than just a phishing mail?

-----

I don't think I've ever got physical mails from scammers, but for quite a number of years I did receive - now and then - various "interesting" scam emails.
But they've stopped. For years now.

I was subscribed to one of their newsletters on one of my email accounts before the marketing breach and I was also getting a lot of emails asking me to 'update' my device or different scamming methods.  They stopped on my end too last time I checked.

[mikel_012]

Of course running away from Ledger is the best idea but I still think it is much better to only receive a false mail than the wrench.  The best is not receiving any of the two, but has any of these known fake mail cases ended more violently than just a phishing mail?

-----

I don't think I've ever got physical mails from scammers, but for quite a number of years I did receive - now and then - various "interesting" scam emails.
But they've stopped. For years now.

I was subscribed to one of their newsletters on one of my email accounts before the marketing breach and I was also getting a lot of emails asking me to 'update' my device or different scamming methods.  They stopped on my end too last time I checked.

There are many cases of kidnapping but we can not know if the bad guys did this because of a Ledger leak or another leak. They always know the person has a lot of cryptocurrency and this is all they need

But why run away from Ledger? He said that you should not use your real data, not that you should not buy a Ledger. The product is good and safe and everyone needs to buy one to hold crypto safely.

[Hazink]

I was subscribed to one of their newsletters on one of my email accounts before the marketing breach and I was also getting a lot of emails asking me to 'update' my device or different scamming methods.  They stopped on my end too last time I checked.

Maybe they have a mass number of times in which they send out mail to each person and if there is no response or attempt to fall victim, they just give up, or they have already marked you guys as their past clients, Lol. And with the way this scam mail is being dished out, they are supposed to be automatically sent to spam mail, not a ledger user, but if I was one I would likely not even see the mail.