Discussion

• @ledger @ledger on x

  Today we were alerted to the dump of the contents of a Ledger customer database on Raidforum. We are still confirming, but early signs tell us that this indeed could be the contents of our e-commerce database from June, 2020.

• @oddslotcom Oddslot on x

  @GVOCollective @Dan44632842 @CryptoAcee @richardiporter @BrightPulsar @UnderTheBreach @Ledger @haveibeenpwned @troyhunt Here are the @Ledger phishing emails I received since Nov 21 https://twitter.com/...

• @ledger @ledger on x

  It is a massive understatement to say we sincerely regret this situation. We take privacy extremely seriously. Avoiding situations like this are a top priority for our entire company, and we have learned valuable lessons from this situation which will make Ledger even more secure

• @ledger @ledger on x

  We executed penetration tests and forensic analysis with external security firms to test these and find any additional vulnerabilities on our e-commerce systems.

• @cointracker @cointracker on x

  Warning: the personal information of over 1M Ledger users is floating around the web. This includes names, emails, phone numbers, physical addresses. There will be a lot of sophisticated attempts to fool you into entering your PIN / seed phrase. DO NOT DO IT! https://twitter.com/…

• @nathanielpopper Nathaniel Popper on x

  It is remarkable that a company that asked to be trusted to secure the Bitcoins of its customers, one of the hardest security jobs around, wasn't able to secure its own customer databases. Now all those customers are at risk. https://twitter.com/...

• @timccopeland Tim Copeland on x

  As though the phishing emails weren't enough... https://decrypt.co/...

• @bleepincomputer @bleepincomputer on x

  These phishing attacks started in October 2020 using data stolen during a Ledger data breach in June 2020. The data from this breach was leaked this weekend for free online, so expect further phishing attacks to begin. https://www.bleepingcomputer.com/ ...

• @ledger @ledger on x

  We have set up a webpage sharing the anatomy of these phishing attacks so you can avoid falling for them and report any new attacks you receive: https://www.ledger.com/...

• @ledger @ledger on x

  Since July, we have done everything possible to make Ledger stronger for the future. We have hired a new Chief Information Security Officer (CISO). We are further hardening our already strong systems and have thoroughly reviewed our data policy.

• @ledger @ledger on x

  We have notified the French data protection authority regarding the data breach and are working with other data protection authorities across the world. Our Customer Support team is working 24/7 to answer your questions.

• @rsrfren @rsrfren on x

  You shouldn't even have this database, @Ledger Ship us out device, then delete our info. I'm amazed at how badly you guys can heck up an amazing product by having bad security on your marketing database https://twitter.com/...

• @lunoglobal Luno on x

  At Luno, we care about the safety of your wallet. The recent Ledger data breach shows how important it is to protect your account - make sure you change your password regularly, don't share it with anyone, and enable 2FA on your account. Read more here: https://www.luno.com/... h…

• @adeldmeyer Adel on x

  Theft of our personal data is far worse and more dangerous than those few crooks doing money laundering! There's 0 respect for our #privacy, data or safety. ‘But we all have to do KYC for our own safety to project us from the big bad wolves out there right?’ #DEX #P2P #Ledger htt…

• @ledger @ledger on x

  MOST IMPORTANTLY: Never share the 24 words of your recovery phrase with anyone, even if they are pretending to be a representative of Ledger. Ledger will never ask you for them. Ledger will never contact you via text messages or phone call.

• @ledger @ledger on x

  We are continuously working with law enforcement to prosecute hackers and stop these scammers. We have taken down more than 170 phishing websites since the original breach.

• @yellowblock_io YellowBlock on x

  Cryptocurrency hardware wallet provider @Ledger was hacked. Your funds are safe but the information that you have used to purchase it has leaked. The company will never ask you for sensitive information over emails, do not provide that to anyone pretending to work for them. https…

• @ourielohayon Ouriel Ohayon on x

  Wow. Really bad. At this stage it may just better to ignore any email coming from ledger and just take news from their blog or Twitter. I am more worried about other attacks that can now happen (sim jacking being one of them) https://twitter.com/...

• @isafepal SafePal Wallet on x

  This is exactly why new and additional KYC rules on users personal wallets aren't necessary. Your just telling all the hackers where all the funds are and they will create elaborate scams to target these wallet owners. Beware of Social Engineering❗❗❗ Keep Your #Crypto #safu https…

• @ledger @ledger on x

  We were aware of this data breach, alerted the authorities, our users, and have been fighting downstream attacks ever since. For more information on this breach, please see the original entry in our FAQ: https://support.ledger.com/...

• @doncryptodraper Don Crypto on x

  For those using Ledger Hardware wallet. - same Hack from June, just the data is now public - Its personal data, address, phone, email - No financial data was hacked, your crypto is safe You were among the 9500? you get more scam emails/texts to ignore https://www.theblockcrypto.c…