Another day of scamming using breach Ledger account

[Daniel91]

Honestly, I still regret buying the ledger directly from the manufacturer in France instead of going to the nearest local hardware store and buying it there completely anonymously, without sharing any personal information.
At the time, I thought it was better to buy the ledger hardware directly from the manufacturer for security reasons, but after they hacked their poorly protected user databases, I still haven't been able to get rid of the spam messages I've been getting regularly since then.
It doesn't surprise me at all that other problems with them have emerged in the meantime.

[FinneysTrueVision]

This scam isn’t exclusive to Ledger. People will send out physical letters, impersonating Trezor and other hardware wallet companies also.
https://www.reddit.com/r/ledgerwallet/comments/1rql9d4/leaked_personal_information/

Not buying Ledger products is already easy enough to do with their reputation, but scammers might still try to target you if you have ever done KYC for any crypto service and that information gets leaked. If you don’t disclose any personal information about yourself, then scammers can’t find you. Avoiding KYC might not be the most practical solution for everybody, but you should still keep your total holdings private so you don’t become a bigger target.

[Somegory]

Another scam being pull off as as result of the breach early this year: Global-e Incident to Order Data - January 2026.

Surely this won't be the last so for those Ledger holders you are still going to be the target as your physical addresses is already in the hands of the criminals.

It can happen with purchases of other hardware wallets too but again, it's about Ledger wallet. It can be another coincidence to make reputation of Ledger wallet brand worse.

This guide for buying a hardware wallet the right way will be very helpful for anyone with plans and practice of buying a hardware wallet in the future.

Spending money for purchasing a hardware wallet is good intention but not enough, let's do it rightly by
Choosing a good hardware wallet (open source).
Buying it rightly.

I've seen way more scam tricks from Ledger hardware wallet than any other hardware wallet in crypto space, but this doesn't change anything much, because any hardware wallet name can be use too.

It seems that many people just do what they feel it's right, they don't do much research when it comes to sensitive decision like this, no one should be able to scam you as a hardware wallet users, especially in the most ridiculous ways.

The best things to do as a beginner in crypto space is choosing the right hardware wallet first, open source and airgapped then followed by Using the hardware wallet the right way.

[Pmalek]

For bitcoin users who do not really care about altcoins, I will only recommend wallet on airgapped devices like Electrum. Hardware wallets come with reduced privacy which I do not like.

In that case, you can also get yourself one of the DIY airgapped hardware wallets. Order the different components from different shops. Some of these hardware devices aren't immediately associated with bitcoin and  crypto users because they are also used in AI, Robotics, security camera equipment, face recognition systems, etc. Even if you order such a unit in your name and to your address and the information leaks, no one knows why you bought it and for what purpose.

[Lucius]

I wouldn't agree with you, because first you take the line of least resistance, and then you resort to some more violent measures. Just because someone received a letter doesn't mean that nothing will happen after that. Anyone who cares about the safety of themselves and their loved ones should never buy an Ledger device, or any other hardware wallet using their real data.

Of course running away from Ledger is the best idea but I still think it is much better to only receive a false mail than the wrench.  The best is not receiving any of the two, but has any of these known fake mail cases ended more violently than just a phishing mail?
~snip~

I can't say if this happened, but considering the hundreds of thousands of users whose data has been leaked since 2020, I think it would be unreasonable to say that something like this didn't happen. In general, very few cases will reach the public. What you need to keep in mind is that someone could be the target of an attack today, or even in 10 years - these databases are public and accessible to practically any criminal who knows how to use the internet and a computer.