Ledger faces $500 million lawsuit over repeated data breaches
A class action lawsuit has been filed against crypto wallet maker Ledger, seeking up to $500 million in damages over repeated data breaches that allegedly exposed user data and led to theft.
The lawsuit, filed on August 27, 2026, claims Ledger failed to protect customer information and did not properly warn users after breaches in 2020 and 2023. A crypto wallet is a digital tool used to store and manage cryptocurrencies like Bitcoin.
Breaches exposed nearly 300,000 users
In 2020, personal data from almost 300,000 Ledger users was leaked and posted on a marketplace for stolen information. In 2023, a phishing attack on a Ledger employee spread malware that redirected crypto from users’ wallets to attackers.
The plaintiff, Douglas Kim, says he lost nearly $2 million after thieves used data stolen in these breaches to target him.
Lawsuit alleges negligence and poor security
The lawsuit accuses Ledger of showing “a disturbing pattern of negligent, reckless, and irresponsible behavior” in handling user data. It claims the company downplayed the breaches, delayed notifications, and failed to improve security measures to prevent future incidents.
It also alleges Ledger violated New York’s Stop Hacks and Improve Electronic Data Security Act and seeks a jury trial. The company has not publicly commented on the legal matter.
What is confirmed
- A $500 million class action lawsuit was filed against Ledger on August 27, 2026.
- Data breaches in 2020 and 2023 exposed personal information of nearly 300,000 users and led to malware attacks.
- The plaintiff claims financial losses due to stolen data.
- Ledger has not responded to the lawsuit publicly.
What is still unclear
It is not confirmed whether Ledger will settle the lawsuit or if the case will proceed to trial. The lawsuit does not mention a 2026 breach involving a third-party payments processor, which was reported separately.
Why this matters for crypto users
If the allegations are proven, the case highlights risks for users of crypto wallets when companies fail to secure personal data. Stolen information can be used to target users for theft, as the lawsuit claims happened here.
