Recently, we shared news of a data dump. On December 23, we were alerted by our e-commerce provider Shopify about an incident in April & June '20 where their rogue team members exported merchants' customer databases. Ledger was included. More details: bit.ly/3qf8BPL
The information obtained by these agents is 93% similar to the previous data dump. However, 7% (around 20,000) of the customer records breached are new. We have directly contacted the concerned users to inform them about this.
We are dedicated to taking action against this incident. Here's an update on our ongoing efforts to strengthen our security practices and pursue justice: bit.ly/3qf8BPL
Security reminder: never share 24-word recovery phrase. Ledger will never ask you for your 24 words. Only enter your 24-word recovery phrase into your Ledger device, and never into Ledger Live.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Today we were alerted to the dump of the contents of a Ledger customer database on Raidforum. We are still confirming, but early signs tell us that this indeed could be the contents of our e-commerce database from June, 2020.
We were aware of this data breach, alerted the authorities, our users, and have been fighting downstream attacks ever since. For more information on this breach, please see the original entry in our FAQ: support.ledger.com/hc/en-us/artic…
It is a massive understatement to say we sincerely regret this situation. We take privacy extremely seriously. Avoiding situations like this are a top priority for our entire company, and we have learned valuable lessons from this situation which will make Ledger even more secure