Plaintiffs accuse the hardware wallet maker of failing to protect customer data, leading to theft of digital assets.
Ledger, the French manufacturer of hardware cryptocurrency wallets, has been sued for $500 million. The lawsuit centers on claims tied to multiple data breaches and alleged theft of crypto assets linked to those incidents, according to reports from Protos and crypto.news.
Ledger built its reputation on offline, or cold, storage devices meant to keep private keys away from internet-connected systems. The company markets these devices as a safer alternative to storing crypto on exchanges. That reputation has been tested repeatedly since a major 2020 breach exposed customer contact information, including emails and physical addresses.
The new lawsuit reportedly ties together several breach incidents rather than a single event, framing them as part of a pattern. Plaintiffs allege the company's data handling practices left customers exposed to targeted scams and theft. The exact number of plaintiffs and the specific legal claims were not detailed in available reporting.
Data breaches at crypto firms carry outsized risk because leaked information often enables highly targeted phishing campaigns. Attackers who obtain a list of confirmed hardware wallet owners can craft convincing scam messages. Victims sometimes lose funds after being tricked into revealing recovery phrases or approving malicious transactions.
Ledger has previously acknowledged breaches affecting its e-commerce and marketing database, which held customer information rather than private keys or wallet contents. The company has said its devices themselves were not directly compromised in those past incidents. Still, leaked customer data has been linked by researchers and affected users to subsequent phishing attempts.
The $500 million figure represents the damages plaintiffs are seeking, not a confirmed or awarded amount. Litigation of this size against a crypto infrastructure company would be notable given the industry's relatively limited track record of large civil judgments. How the case proceeds, and whether it survives early motions, remains to be seen.
Ledger has not yet issued a detailed public response addressing the specific allegations in this filing, based on available reporting. The company has in the past emphasized its security practices and pointed to third-party audits of its hardware.
Market Impact
A lawsuit of this scale could pressure Ledger to revisit its data security and breach disclosure practices, particularly around how customer information is stored and shared with third parties. Hardware wallet providers compete heavily on trust, so litigation alleging repeated failures could affect customer confidence even if the devices themselves were not directly breached.
For the broader crypto custody market, the case underscores ongoing scrutiny of how companies protect user data outside of the blockchain itself. Regulators and investors increasingly treat data security as a core component of crypto market structure, not a side issue, which could shape future compliance expectations for hardware and software wallet providers alike.
The lawsuit adds to a string of legal and security challenges Ledger has faced since its 2020 data exposure, and its outcome could influence how the industry approaches customer data protection going forward.
Frequently Asked Questions
What is Ledger being sued for?
Ledger is facing a $500 million lawsuit alleging multiple data breaches led to theft of customers' cryptocurrency, according to reports from Protos and crypto.news.
Was Ledger's hardware wallet itself hacked?
Available reporting does not indicate the physical wallet devices were compromised. Past breaches involved customer data stored in Ledger's databases rather than device security.
Has Ledger had data breaches before?
Yes. Ledger disclosed a significant breach in 2020 that exposed customer emails and physical addresses, which was later linked to phishing scams targeting affected users.
Has Ledger responded to the lawsuit?
No detailed public response from Ledger addressing the specific allegations was available at the time of this report.
