Still HODL everyone?  * OutOfMemory does |
|
|
|
|
Today it's fascinating and scary at once.
|
|
|
|
$25.966 here we go again! EDIT: Just touched $26k and down. It's a matter of time. I also share Bawb's thoughts about a stronger correction, the question is when in price/time it will happen. hodlers unaffected |
|
|
|
Merry Christmas (a lil late but still...) Here's my take:  |
|
|
|
Text block for ledger data deletion email (to privacy@ledger.fr) Madame, Monsieur,
as an EU citizen, i kindly request full data erasure of all my personal data (name, email, address, phone... etc.) from your databases in accordance to EU GDPR Art. 17 (aka. "Right to be forgotten") without undue delay.
Please inform me after acknowledgement of my deletion request and also as soon as possible after completion of erasure.
Sincerely,
My Name
EDIT: And moments later, their auto-reply reached my mailbox: Hi,
Thank you for reaching out. If your inquiry concerns the “July 2020 e-commerce and marketing data breach”, please read our blogpost and FAQ on the matter, in which you’ll find detailed information about what this regretful incident means for you and for your personal information.
If you wish to delete the personal information we have about you or exercise any of the rights mentioned in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR") or if you have any additional questions about the use of your personal data, please refer to our Privacy Policy to submit a data subject rights request to Ledger’s privacy team who will get back to you in due delays.
Due to a current high volume of requests and in order to facilitate processing, please do not submit duplicate requests as this may drag response time.
For any other inquiry, please do not hesitate to reach out to our Ledger Support team.
Thanks for your understanding.
I've just sent a similar email, and got the same response (obviously). Please keep us updated with any replies from them, etc. I'll do the same. According to this website - they have 1 Calender month to comply to your request . https://ico.org.uk/your-data-matters/time-limits-for-responding-to-data-protection-rights-requests/Although - “ If your request is complex or you make more than one, the response time may be a maximum of three calendar months, starting from the day of receipt.” I’ll also be watching their response time - GOOD LUCK TO ALL Good info, thanks. Got a second response: Hi,
Thank you for contacting Ledger regarding the processing of your personal data. In accordance with our Privacy Policy and the European General Data Protection Regulation, our data protection team will now process your request and get back to you within due delays.
We thank you for your patience and for your support.
Kind regards,
Privacy Team
EDIT: The standard phrase " thank you for your patience" often suggests that it might take a little longer  |
|
|
|
Well, they do have some categorized sections too, but in between those sections they just stack things willy nilly, and then you have those weird "just this week" offers that takes up like one third of the store.
By the way, to the right of the towels they have the Parkside power tools, makes total sense.
Very unlike from what i see at Lidl. I have to take a pic, i guess. Let's hope i won't forget to. Lately i avoid Aldl and Lidl, they're too crowded. Many "Nosebears" and "Chin-diapers", IF people wear masks. Social distancing? Not here. You can probably get into a fight when you ask someone to step back and keep the distance. But i have to be fair, living on the countryside of one of the most moronic countries of europe  Over here, Lidl is one of the places where the distancing works the best, maybe because it's still a bit of an odd place that's not as crowded as the "old" places. At least where I live. And very few people over here wears a mask at all, It's still not recommended, except for public transport, so not a source of irritation, (yet). Over here, it's mainly the cheapest price which drives the people. Salaries are on the lower side in this part of the country. People are more simple minded than in the cities, with a few exceptions. Time to go to bed, a big day tomorrow and I still haven't wrapped the presents.
I just did  Have a good night! |
|
|
|
Well, they do have some categorized sections too, but in between those sections they just stack things willy nilly, and then you have those weird "just this week" offers that takes up like one third of the store.
By the way, to the right of the towels they have the Parkside power tools, makes total sense.
Very unlike from what i see at Lidl. I have to take a pic, i guess. Let's hope i won't forget to. Lately i avoid Aldl and Lidl, they're too crowded. Many "Nosebears" and "Chin-diapers", IF people wear masks. Social distancing? Not here. You can probably get into a fight when you ask someone to step back and keep the distance. But i have to be fair, living on the countryside of one of the most moronic countries of europe |
|
|
|
You know that fictional store "Food and Stuff" in "parks and recreation", well Lidl must be the real life European equivalent. Lidl Is a German or Austrian, not sure witch, store that's pretty new in Sweden, but I understand it's been around for a long time in central europe. And it's the weirdest store I've ever been in, everything is just stacked without any planning (or so it seems), they have stuff all the time that's just there "on a short visit" and the checkout counters are of that weird German type that's so short that your stuff doesn't fit and you have to run to the end and start packing before you pay. "excuse me, where can i find the towels?" "They are right next to the firewood, witch is right next to the coca cola."  This looks very unlike what i am used to see at Lidl. At least they have categorized "sections", but the common thing is the counters. A looong conveyor, followed by a counter about 40cm wide. And you always have to fumble for the purse when you still have to get things into your cart at checkout again. That look of the cashiers lady, that's telling you that you're not fast enough, so she has to wait to start processing the goods of the next customer in line... Horr-i-ble Sideways? Barely one week. ___ Also, aren't we gonna save the 300 meme for when we hit $300k? What we really want to wait for is Vegeta at $900k. Hm, it must have slipped past me that Leonidas is the 300 meme (hence the title). Also, i accidently looked at the 5 min chart just before posting the meme, which was meant as a joke, because it's going kinda sideways for a few days now. Apologies, i will make it up to you when we hit $300k, i promise. |
|
|
|
thanks, and a new business idea was born! EDIT: enter your email address and we will request to remove your entries from almost the whole Internet. EDIT2: you can call it social DDOS. we both invented it. Nice, i'd be satisfied with only 5% of total income of the service, paid in BTC on a monthly basis  do we have competitors and do we have enough markets to push the product/service? EDIT: BTW who should be the Boss and who should do all the work? Work? Forget it, i'm out  No, just joking. We'll hire some east european computer wizards to set up web interfaces and backend services, a couple of british telephone sexworkers (female) for support hotline. A salesman. Roger Ver might need some money soon after BCH goes to zero. We both share inter-communication and organisation of annual company parties in the world's nicest places. How's about that for a start? EDIT: Oh yeah, and hookers and blow and all that EDIT2: Just to stay on topic:  |
|
|
|
thanks, and a new business idea was born! EDIT: enter your email address and we will request to remove your entries from almost the whole Internet. EDIT2: you can call it social DDOS. we both invented it. Nice, i'd be satisfied with only 5% of total income of the service, paid in BTC on a monthly basis |
|
|
|
Text block for ledger data deletion email (to privacy@ledger.fr) Madame, Monsieur,
as an EU citizen, i kindly request full data erasure of all my personal data (name, email, address, phone... etc.) from your databases in accordance to EU GDPR Art. 17 (aka. "Right to be forgotten") without undue delay.
Please inform me after acknowledgement of my deletion request and also as soon as possible after completion of erasure.
Sincerely,
My Name
EDIT: And moments later, their auto-reply reached my mailbox: Hi,
Thank you for reaching out. If your inquiry concerns the “July 2020 e-commerce and marketing data breach”, please read our blogpost and FAQ on the matter, in which you’ll find detailed information about what this regretful incident means for you and for your personal information.
If you wish to delete the personal information we have about you or exercise any of the rights mentioned in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR") or if you have any additional questions about the use of your personal data, please refer to our Privacy Policy to submit a data subject rights request to Ledger’s privacy team who will get back to you in due delays.
Due to a current high volume of requests and in order to facilitate processing, please do not submit duplicate requests as this may drag response time.
For any other inquiry, please do not hesitate to reach out to our Ledger Support team.
Thanks for your understanding.
|
|
|
|
I decided to write to Ledger (again) asap. This time i want ALL my data removed from ALL their databases under GDPR.
Of course, i will remind them, that refusing to do so is illegal in the EU and that i have to report it to the officials through my embassador/foreign affairs ministry.
In the meantime i'm gonna figure out the correct instance to turn to, which form and/or wording i have to use etc.
Good move. Please keep us posted on this. I'm also thinking of writing to those jokers, to formally request the complete deletion of everything they hold about me, under GDPR. Complete deletion. Those fucks! I hope they go bankrupt and be forced to pay heavy fines. Use formal language and don't be impolite (don't swear, etc.), just cold and to the point. This will scare them even more. Good luck! Will let you guys know what happens in my case too, I just need to find the time to write a proper email. You don't need much time, i'll post my text later. I am used to formal language, i am always friendly, especially to my enemies EDIT: From their FAQ: Does Ledger comply with GDPR?Ledger is working tirelessly to comply with GDPR and other data protection regulations. This is why within 3 days of the discovery of the data breach, Ledger reported the information to the French Data Protection authority and has been provided updates as they became available. Ledger is also working and communicating openly with other data protection authorities. Ledger’s privacy team is also mobilised to respond and manage any privacy related queries that customers may send us. If you have a specific request about your data (access, erasure….) please send us an email at privacy@ledger.fr. |
|
|
|
For US customers only. EU customers (no guns allowed): "You're on your own!"
I don't care. My wrench is bigga than yourz  I decided to write to Ledger (again) asap. This time i want ALL my data removed from ALL their databases under GDPR. Of course, i will remind them, that refusing to do so is illegal in the EU and that i have to report it to the officials through my embassador/foreign affairs ministry. In the meantime i'm gonna figure out the correct instance to turn to, which form and/or wording i have to use etc. |
|
|
|
...explaining the law to them.
Be your own lawyer |
|
|
|
Ledger update: I took my backups and extracted the emails from about three years ago, when i ordered my first nano. Clicking on the "Order details" link takes me to a page where order details are shown as "hidden" (for my security), because the order completed. So far so good, that's maybe why personal data from my order is not included in the e-commerce db leak, but my email must be there, because of the lately increased spam. Reviewing my recent order shows all data, but it's completed as well. I have to insist to apply GDPR Art. 17 to all my personal data @ledger. Another grumpy email session Don't bother at this moment. Instead, query a database there are two places: https: //intelx.io/?did=8761746e-d333-4256-bbcd-9100c8722799 or simply https: //intelx.io , then search for your e-mail. It will show either just email OR the whole echilada (address, name, etc) Alternative is https: //haveibeenpwned.com/ , but people say that intelx is better because you can just scan with email. I am putting the gap (between : and //) in the address, so it would result in non-clickable link. You can assemble if so desire. If your info is there, GDPR will do nothing as the data is already out there, sorry Strangely, hibp.com shows two breaches for my email, and one of them is "Covve contacts app", though i never used it. Ledger is also listed. Regarding intelx, i have been using up my limit as non-registered user for downloads of the eight txt files with personal data. Will have to wait until tomorrow to download the email database files, for a local scan. I know, i could reset the gateway, clear the cookies and cache and have another free go today, but it's not that important to me, now that i know that my personal data wasn't exposed.
ledger have been hacked seems like my data is safe i am pissed off, though #frenchtardhaiku
EDIT: From ledgers email about the leak (yesterday): If you are part of the detailed personal information subset, you will receive a specific email notifying you within the next 24 hours (check your spam box).
And i didn't receive any more emails from them today. Close, pretty close. But my Email leaked, not that bad too, because it can't be linked to my real name or personal data. The nanos are worthless now too, because if they will go broke because of this, or other shit they will do or did, there will likely be no servers running, at some point, for their client software to connect to. However, lesson learned. Thanks, life. |
|
|
|
Ledger update: I took my backups and extracted the emails from about three years ago, when i ordered my first nano. Clicking on the "Order details" link takes me to a page where order details are shown as "hidden" (for my security), because the order completed. So far so good, that's maybe why personal data from my order is not included in the e-commerce db leak, but my email must be there, because of the lately increased spam. Reviewing my recent order shows all data, but it's completed as well. I have to insist to apply GDPR Art. 17 to all my personal data @ledger. Another grumpy email session |
|
|
|
Im not stupid enough to type my details into any internet "have I been hacked" search engine.
But had no spam so far.
No need. You can download the leaked files and search yourself using a text editor. That's what I did. Can't help feeling possessing such data is perhaps a little naughty. It is, but if you've purchased a Ledger before June 2020 (or ever, really), you are entitled to peek inside and check if your data is in there. I was lucky, too. But, i apologize because i was thinking about the old, hacked dataset. This one is new. F*ckers! EDIT: Just read their apologies on titter. "Alerted the authorities"  LOL Help, police!!! HEeeeelp!! What a bunch of losers. They should consolidate and wipe their data every day. What's so hard about that? |
|
|
|
Im not stupid enough to type my details into any internet "have I been hacked" search engine.
But had no spam so far.
No need. You can download the leaked files and search yourself using a text editor. That's what I did. yeah but its not much different from a list of people who brought expensive hot tubs. Sure some may be rich, some might just like hot tubs. There are much easier ways for crooks to find rich people. The paranoia level here is like a feedback loop. I just suggested a secure way to check if you're on the list... I think the more immediate threat for those affected is the spam/phishing flooding of their email accounts. But it is possible that some (hopefully none) could face physical harassment too. There are 273K customers on the list. That's not a partial database. You bought from them before the leak and you should be there. With whatever data you provided to them. The "persona" I provided to them is in fact there. This is something that "happens" but at the same time it is something that should not have happened. What angers me the most is that they lied in saying it was only a very partial list with only 9K customers when it is indeed the whole list. Many, if not most, of the addresses in the list look like real home addresses (maybe not their own though) no P.O. boxes or business. The only good thing is that the list is so big (in fact there is way more people in some zones than I would have ever guessed) that it "dilutes" the focus of any potential "attacker". Also, like Globb0 said it doesn't mean those do have a big amount of BTC (maybe not even BTC, just worthless shitcoins) nor that they do still have anything anymore. Not a dull day in Bitcoinland.... Nope. They clear their e-commerce database from time to time, iirc once a year. This one got leaked, with data from a certain timespan. They outsourced their shop and the shop software was vulnerable. It's not the customer database, which is not accessible from the internet, where all customer data is stored. |
|
|
|
I have gotten at least 20 spam emails. /yawn What this hacker is doing is putting people at serious risk of physical extortion attacks! People may be be kidnapped, tortured and even killed because of his actions. This is a criminal act, and I really hope this hacker is found, arrested and put to jail for life. That's not even a hacker. It's a troll. If ledger doesnt grant my "right to be forgotten" as an EU company, to an EU citizen, they're gonna get into trouble, i swear. They have to send me a proof of deletion. I soon will issue an ultimatum, otherwise my lawyers phone will ring my tune. News coverage of ledger trying to escape the law would be candy. [/angry mode] I'm with you on this. I was not affected, purely out of luck (purchased a Ledger from those jokers in 2017—one year before the leaked data), but I'm pretty sure they still have my details. I'm an EU citizen too. If there is a law or other legal/official info I can use to threaten them in the email I'm going to send them, please let me know, either publicly (maybe here, for the benefit of all), or via PM. I also want to make sure they completely erase my data from their servers. And I do hope they go bankrupt—I think they will, given that their blunder directly negates their sales pitch for their h/w wallets. Who, in their right mind, would buy a Ledger, or use their online services, after what happened? The Ledger may be a solid product, but I prefer the mafia way of dealing with such issues: "When in doubt, kill 'em all!" I was lucky too, not affected. I also browsed and searched the leaked content, and there are surprisingly more customers in my area (within 50km) than i thought. However, to every name i was visualizing a face getting smashed with a hammer, so i quit sniffing in the file. Here's your pointer: https://gdpr-info.eu/art-17-gdpr/ |
|
|
|
I have gotten at least 20 spam emails. /yawn What this hacker is doing is putting people at serious risk of physical extortion attacks! People may be be kidnapped, tortured and even killed because of his actions. This is a criminal act, and I really hope this hacker is found, arrested and put to jail for life. That's not even a hacker. It's a troll. If ledger doesnt grant my "right to be forgotten" as an EU company, to an EU citizen, they're gonna get into trouble, i swear. They have to send me a proof of deletion. I soon will issue an ultimatum, otherwise my lawyers phone will ring my tune. News coverage of ledger trying to escape the law would be candy. [/angry mode] |
|
|
|
|
Show Posts
