[WARNING]🚨🚨🚨 The Ledger database leak has been made public 🚨🚨🚨

[M-BTC]

Yesterday someone made the Ledger database leak public, making it accessible to everyone. Expect a lot of phishing attempts in the coming weeks/months!

The leak contains 1,075,382 email addresses and the personal details of 272,853 customers. So there is a huge chance, if you are a Ledger customer, that you're going to receive a lot more phishing emails/text messages.

I will contact a moderator to ask permission for posting a link to the database breach, in case anyone wants to check if they're part of the leaked data.

[1714544727]

1714544727

[1714544727]

1714544727

[1714544727]

1714544727

[acquafredda]

Ledger should be out of business as a company. I read on their Twitter account:
"It is a massive understatement to say we sincerely regret this situation. We take privacy extremely seriously. Avoiding situations like this are a top priority for our entire company, and we have learned valuable lessons from this situation which will make Ledger even more secure".
I know what a massive understatement would be towards Ledger but I will keep it for me.
 

[TalkStar]

Yesterday someone made the Ledger database leak public, making it accessible to everyone. Expect a lot of phishing attempts in the coming weeks/months!

Its already started and we have seen some accusation which are related to ledger database leak. Yesh its true that before today only some specific scammers were using the database.but now more scammers will get the opportunity to use this database. Its definitely gonna decrease the popularity of ledger hardware wallet and crypto assets holder will think twice before purchasing ledger hardware wallet.

Personally i will suggest our forum users who have ledger wallet they should be.much careful about ledger related fake emails and updates. Whenever you get a ledger related email from unknown sources just ignore the email and follow ledger official website.

[FatFork]

I will contact a moderator to ask permission for posting a link to the database breach, in case anyone wants to check if they're part of the leaked data.

No need for additional link sharing. Anyone interested can simply check to see if their personal information has been leaked at the "Have I Been Pwned" website.

"Have I Been Pwned allows you to search across multiple data breaches to see if your email address has been compromised."
https://haveibeenpwned.com/

[TryNinja]

"Have I Been Pwned allows you to search across multiple data breaches to see if your email address has been compromised."
https://haveibeenpwned.com/

This website doesn't show on which list your email was included (just that it was on at least one of them). If you want to know if your physical address, name and phone number was also leaked, then you will need to check it yourself.

The leak was alredy posted everywere anyways. You can find it on the forum, twitter and even github.

[FatFork]

"Have I Been Pwned allows you to search across multiple data breaches to see if your email address has been compromised."
https://haveibeenpwned.com/

This website doesn't show on which list your email was included (just that it was on at least one of them). If you want to know if your physical address, name and phone number was also leaked, then you will need to check it yourself.

The leak was alredy posted everywere anyways. You can find it on the forum, twitter and even github.

Yes, you're right. I singled it out and checked a couple of email addresses out of the list myself. While the website correctly identifies that the address is in the leaked data, it does not indicate if any other personal data has also been compromised. All email addresses are given the same information:


source: https://haveibeenpwned.com/

[M-BTC]

Ledger has sent out emails to every who had their email address leaked and another separate email to anyone who had their full details leaked. Make sure to check your spam folder (since it's likely a mass email).

[acquafredda]

Ledger should understand that from a customer point of view this is a massive problem: people will get targeted after this. There are real names, addresses, phone numbers freely available out there.
It is not about phishing here, we can live with it: it is about people safety.