How a third-party data leak led to phishing attempts against Ledger users

A third-party e-commerce breach exposed order data, enabling phishing attempts without compromising Ledger wallets or self-custody systems.

A breach at a commerce partner can expose customer order data even if wallet systems remain secure.

Real order context, such as product, price and contact or shipping details, can make phishing attempts appear legitimate and harder to detect.

Treat inbound “support” messages as untrusted until they are verified through official Ledger resources.

Read more