Ledger Users Targeted in Phishing Scam Following Global-e Data Breach

Source: CryptoNewsNet Original Title: Ledger Users Targeted in Phishing Scam Following Global-e Data Breach Original Link:

Phishing Attack Details

Cybercriminals have launched a targeted phishing campaign using a fake merger between cryptocurrency hardware wallet manufacturers Ledger and Trezor, following a recent data leak at Ledger’s third-party e-commerce partner, Global-e.

On January 5, Ledger disclosed to its customers via email that Global-e had suffered a data breach, exposing customer information including names, email addresses, phone numbers, and order details. Shortly after the incident was made public, affected users began receiving phishing emails falsely claiming that the two companies had merged.

The fraudulent message read:

“We are pleased to announce that after months of strategic discussions, Ledger and Trezor have finalized a merger agreement. This landmark partnership unites two industry leaders with a shared vision of providing the highest standard of security for digital asset management.”

The email further stated that the decision would allow the two firms to accelerate innovation, expand their product offerings, and continue their commitment to protecting clients’ assets. Recipients were instructed to “migrate” their wallets by entering their 24-word recovery phrases on a fake website designed to mimic official branding.

Response and Investigation

In response to the attack, Global-e has launched an internal investigation into the hack and is working with cybersecurity experts to assess the scope of the incident. The company confirmed that the breach was limited to contact and order information, though it has not disclosed the exact number of affected users.

Ledger has notified relevant data protection authorities and is cooperating with law enforcement agencies.

Historical Context

This episode is not the first time Ledger has faced such security challenges. In 2020, attackers accessed its e-commerce and marketing databases, exposing personal information of hundreds of thousands of users, including email addresses, names, phone numbers, and physical addresses. Affected users later reported receiving phishing emails and threats.

The company faced public criticism for delayed disclosure and inadequate safeguards, resulting in a formal lawsuit. Ledger later confirmed that a rogue employee was responsible for leaking personal details of approximately 20,000 customers. A separate attack later that year exposed data of about 292,000 customers.

More recently, the firm suffered another security incident resulting in the theft of approximately $600,000 in cryptocurrency after a wallet drainer was inserted into a library used by multiple decentralized applications to connect to their devices.