Cyber Criminals dumped Ledger's hack database

[Dave1]

https://twitter.com/UnderTheBreach/status/1340728236528033797

I know that this is not new, however, it's been confirmed how many data the hackers was able to acquire.

• 272,000 Ledger buyers
• 1 million additional users, (doesn't mean actual buyers, but probably in the Ledger's database as potential customers)

And since bitcoin reaches ATH, expect Ledger users to get a lot of phish email, regardless on what time zone you are.

the dump files can be found here:

Code:

https://intelx.io/?did=8761746e-d333-4256-bbcd-9100c8722799

[1713849987]

1713849987

[1713849987]

1713849987

[Jating]

What worries me is that the criminals have gotten the physical addresses. We can change our email address, but our physical home? Yes, most likely this "cyber" criminals won't target our home, but it is not far fetch, and it could happen in the future.

So for Ledger users, we really need to be very very careful here, just saying.

[sheenshane]

Thanks for this very helpful information, it might not all Ledger Nano wallet users are aware of this but for sure most newbies (or new Ledger wallet users) here probably aware if they will read your thread. 

This case is similar to this thread, created by @witcher_sense, a fake google chrome extension and now might emails accounts and phone numbers of this wallet users might be breached by the scammers.  Probably, if you will receive an email from Ledger Nano much better if you will ignore it.  It might have malicious content for the link that they send.

Maybe @witcher_sense will consider this thread and belong to his SCAM LIST.

[Charles-Tim]

Ledger nano phishing attacks are too common these days, it is all common, and heard all over the news. Although, it is good to be careful of phishing attacks by not click on phishing emails and text messages, but how about peoples that their home addresses and phones numbers are known? Possibly these scammers can link ledger nano wallets to personal identities which could be far and also more risky as others could be. I think noncustodial wallets should be in a way it can not be linked to someone's identity but these phishing attacks making this very possible which is very dangerous.

There was a report that emails from over 1 million users that subscribed to the Ledger newsletter were compromised, also during the process of buying the ledger hardware wallet, some users gave out some details such as emails, home addresses and phone numbers, which were also leaked. Many peoples home addresses are linked to having ledger wallet, and home addresses are known to the public which can be a possible threat later that can possibly result to kidnapping of ledger wallet users.

[Kemarit]

Yes, this is not new, we even have a Ledger SMS phishing campaign – Yet another phishing SMS campaign in progress II by @DdmrDdmr.

The big difference though, is that the criminals or the database have been shared around in underground and hacker forums. But now they decided to dump the list in public. So every crypto related projects can now used this email database and spam the the list itself.

Ico startups can spam the hell out of these buyers now!

Yes, that's what I'm thinking as well, 

[Bighero76]

Ico startups can spam the hell out of these buyers now!

[GreatArkansas]

Ico startups can spam the hell out of these buyers now!

Yep, also some airdrop of some altcoins. These data is really important to these kind of projects. Most of those email addresses and some information are for sure interested in cryptocurrency or already involved with cryptocurrency.
The less worst will happen is some people may advertise ICO or some airdrop to data, and worst is to phish those people.

I hope this is the last incident for Ledger, for sure they may lost a ton of customers because of this breach.

[cryptoaddictchie]

Everyone who are included on the list should turn auto spam on their mails. I'm sure a lot of investors will be flooded by messages of phishing emails. This is bad, some of the investors who own ledger could might be victimised by this.

Thanks for posting it here. Spreading the awareness will help ledger users to be vigilant of possible many phishing links that will be drop on their emails.

[DdmrDdmr]

I read through the forum’s thread from heads to tail a while ago, and at the time, 767 people had unlocked the content that allows one to access the DB links (you need to pay 8 credits to unlock the links, which seems to be pretty easy for such a wide array of people to already have done it). Some idiot has now made it even more accessible, so that even I now have access to the content. Bloody spooky to see …

[Husires]

Why do they need to keep those records for long time? Do they link it to the legal name and addresses, or is it registered separately?
If their purpose is regulatory or legal, why not keep it using offline database?

What precautionary measures will the company take to protect any future hack?

[AB de Royse777]

So now the leaked Ledger databased can be accessed publicly, just matter of time before Ledger user specifically targeted either through threat or violence.
Changing email address and phone number are relative easy, but it's hard to move to different house and i doubt anyone want to change their legal name.

I think this is a burden now. All these users have to live with the consequences and for this I will only blame Ledger authority. They should have more sincere with these data but I do not know how.

When they create a database can't they encrypt the input date like they do for a password. Information like email, physical addresses, phone number etc  should be encrypted.

It's now only with Ledger, we see these exchanges get hacked. Any hacker can easily expose the data if there are no encryption when storing the data.

[witcher_sense]

So now the leaked Ledger databased can be accessed publicly, just matter of time before Ledger user specifically targeted either through threat or violence.
Changing email address and phone number are relative easy, but it's hard to move to different house and i doubt anyone want to change their legal name.

User made a post on reddit claiming he had already received a threatening email in which the fraudster blackmailed him and asked for money.

User has already confirmed he was Ledger customer, which means we may soon witness real attempts to 5$ wrench attacks. Given the fact that the price of bitcoin rises, the temptation to rob and scam others will only increase, the number of such attempts will also increase. This is a very frightening future.

Here is the post:



Source: https://www.reddit.com/r/Bitcoin/comments/kha5ze/interesting_email_about_my_crypto/

Some idiot has now made it even more accessible, so that even I now have access to the content. Bloody spooky to see …

This can be used for good. Victims of the attack need to know if their address was among these records so that they can prepare for a possible attack.

[xxjumperxx]

Checked out my email address on https://haveibeenpwned.com/ and yes my old email is on there as well...
Great!
Thanks Ledger for keeping such data on a live database and making it super easy to grab....
Thanks, so much for security!

[Raflesia]

Everyone who are included on the list should turn auto spam on their mails. I'm sure a lot of investors will be flooded by messages of phishing emails. This is bad, some of the investors who own ledger could might be victimised by this.

Thanks for posting it here. Spreading the awareness will help ledger users to be vigilant of possible many phishing links that will be drop on their emails.

Maybe you can say almost every time you receive phishing emails, especially now that many people receive these emails. Ledger is a scamer target to deceive victims with various excuses, so I am very concerned about this incident, well of course this really makes us Ledger users aware that we must be careful every step of the way because the scamer always had a crack of it open a little.
With this case, I think we need to increase our awareness, lest we become the victims.
But I hope it gets away from me.

[AB de Royse777]

Checked out my email address on https://haveibeenpwned.com/ and yes my old email is on there as well...
Great!
Thanks Ledger for keeping such data on a live database and making it super easy to grab....
Thanks, so much for security!

Brilliant!
However, I am not sure who to blame since it says 5 data breaches.

I have checked the email, and it seems they have my old phone number, and one of the address I live. I am annoyed.

[xxjumperxx]

Brilliant!
However, I am not sure who to blame since it says 5 data breaches.

I have checked the email, and it seems they have my old phone number, and one of the address I live. I am annoyed.

You can scroll down on the site and see the breaches your Email was in...
and you will see something like this:

Breaches you were pwned in....



I have changed emails multiple times and now my new one is clean, lets hope it stays that way.

[Max_Roc]

Checked out my email address on https://haveibeenpwned.com/ and yes my old email is on there as well...
Great!
Thanks Ledger for keeping such data on a live database and making it super easy to grab....
Thanks, so much for security!

My email appears on haveibeenpwned for the ledger breach, but not in the database search. What can that mean? Wondering where they are seeing it?

[xxjumperxx]

My email appears on haveibeenpwned for the ledger breach, but not in the database search. What can that mean? Wondering where they are seeing it?

Same here. I have 2 lists. One list that has just emails in it, like 1.1million and another list that has emails,names, phone numbers and full addresses.

Im not on the address one but Im on the email one. Thats fine I guess. Ill just ignore and block any kind of email scam attempt.

Sucks nonetheless!

PS: just received an email from ledger.

[cheezcarls]

Thank God my email/s weren't included in the hack database. I just simply bought a second hand Ledger Nano S directly from my friend (and I think he just bought it from a third party e-commerce store and not directly from the Ledger website) and of course, it's genuine detected by the software. Man, this is scary, especially that it exposes the physical addresses that breached the privacy of the Ledger buyers.

[20kevin20]

Guess it's all about time before a lawsuit begins over this. Ledger should've handled their customer database with extreme precaution and overwhelming security and this wouldn't have happened. In fact, Ledger should've removed the details of customers if no order has been placed under their information for a certain amount of days.

But again, I suspect Ledger sold this information way before the hack anyway. I doubt there's no government out there who wanted to pay them some large sums for this kind of info. For everyone affected of this problem, just get over it and start using fake information and disposable accounts for future purchases.