Crypto Hardware Wallet Data Breaches Expose Customer Addresses Across Multiple Brands

A series of reported security incidents involving hardware wallet providers has exposed customer information in 2026, raising concerns about targeted cryptocurrency phishing and physical security risks.
Reported incidents include Ledger's e-commerce partner in January, Trezor's shipping partner in August, SafePal's order-tracking integration in August and Keystone's website breach in October. A separate September incident reportedly involved fraudulent alerts sent to Trezor newsletter subscribers.
Trezor and SafePal's reported August incidents alone account for approximately 120,000 exposed customer addresses. The overall total remains uncertain because some providers have not disclosed affected customer counts.
None of the reported incidents exposed wallet recovery phrases or private keys. However, leaked personal information can enable convincing impersonation scams.