Ledger Faces Customer Data Breach Through Payment Processor Global-e

[dkbit98]

Wow, another data breach. Great way to build user trust again, lol. What will Ledger do? Probably nothing, maybe an apology, then move on. No real accountability. At this point, it's hard to see how this won't hurt their business in the long run.

Don't worry, they recently partnered with Lamborghini, and they are ready to start another fundraiser soon to collect more money 
I understand that any company can be hacked, but when in happens multiple times and they keep doing the same thing... it sounds like insanity to me.

PS
Word of advice, try to purchase hardware wallets locally with cash.
If you can't do that, than you can ask a trusted friend to do it for you and send you the package in PO box.

[sokani]

Ledger has been making the headlines for the wrong reasons. So this news does not come to me as a surprise. This is not the first time Ledger has suffered a security breach through a third-party agent, and so far they haven't learned anything from the previous experiences. Why would they share users' data, such as names and contact info, with a third-party agent? They've just succeeded in exposing their customers to phishing scams and I wonder why people still patronize their wallet.

[rdluffy]

As I said in another thread, what worries me most is not the scam emails that will come (and they will come for sure), but the possibility that criminals will be able to cross-reference data and discover customers' physical addresses, full names, etc
It's complicated

And by the way, I believe that several physical attacks on crypto users can be linked to these various leaks that happen constantly

[Faisal2202]

There may be possibilities of phishing link attacks, users of Ledger should be more careful as their contact details were exposed, They should  be on guard for suspicious emails and links.

Payment corridor getting hackes is not a ledge problem but now it is the problem of ledger customers, they are at risk because the agenda behind this is very clear to me, they will target all the customers now, so every single ledger users should not that the emails that they are going to receive will be so good that they won't even look fake and the receivers might think they are legit because on those emails they are going to see their personal data that they will think only the ledger would have.

This is really alarming and as far as I remember something like this has happened before.

[promise444c5]

Just about time for another harvest ..

First, it was directly from them, now instead of fixing it they choose a third party , so with this breach , should we say it not their fault  . I wonder if any other clients/brands/… was listed  apart from ledger .

At this point , apart from non-recommendable HW wallets from Ledger, anybody buying ledger should also know they are publicly declaring they own an HW wallet .

[Cookdata]

https://x.com/TFTC21/status/2008322615061213541

And the phishing email has started. This could be just one of the many emails that the cyber actors will do in the next couple of months to try and find a victim using this latest customer's data breach.

I have a thread about ledger scam and this was even physical mail. https://bitcointalk.org/index.php?topic=5539991.msg65329825#msg65329825

What I have observed with this email compromise is Legder don't care about their customers, they are losing the battle to Trezor and they don't care or maybe they do but at this point, they don't know what to do. As a company, if you want to last long in any business, make sure your customer privacy isn't jeopardize for any reason. At this point, I think ledger has given out all of the customers email address to hackers, as long as these emails exist scammers will not rest with spamming and phishing links.

They don't know that people don't trust their product that much. If you go to YouTube and search for a hardware wallet recommendation, Trezor and some other wallet will come first, older videos are Ledger and I think that's because Ledger was fast selling before people change and switch back to Trezor.

[Don Pedro Dinero]

You seem to be the one who has the crystal ball and never end up buying anything faulty.

I assume Ledger doesn’t possess such magic ball.

Yes, I have a crystal ball that allows me to see that Ledger is the hardware wallet company that has had the most data breaches over the years. And that the way it handles data facilitates this, because if it deleted the data after three months like Trezor does, these things would be minimised.

It seems that since you don't have a crystal ball, you didn't find out what happened in 2020:

In June 2020, the hardware crypto wallet manufacturer Ledger suffered a data breach that exposed over 1 million email addresses. The data was initially sold before being dumped publicly in December 2020 and included names, physical addresses and phone numbers. The data was provided to HIBP by Alon Gal, CTO of cybercrime intelligence firm Hudson Rock.

Cut the crap, you're trying to be clever and all you're doing is making a fool of yourself.

[Rikafip]

The current breach is the fault of another company, namely Global‑e, which is Ledger’s 3^rd party payment provider.

Problem is that this is not the first time Ledger has been involved in data breach incidents, and for that reason people react the way they do.

If this was the first incident, people would see it a different way, but it isn't and just another confirmation that people at Ledger suck at decision making.

Accusing Ledger of this breach is like blaming yourself for inherited DNA in your body being attacked by viruses and and resulting in chronic disease.
That DNA is not under your control. The same is true for Global‑e’s software and hardware, they are not under Ledger’s control.

It is entirely under Ledger control to chose the payment provider that knows how to protect its client's data.

[sunsilk]

The source says, it includes contact details so it's not limited to emails and links that will be from the hackers.

But even personal contact details and numbers too are also prone to this if ever someone has signed up for that and included their personal numbers for deliveries during the orders.

Many times their database has been leaked and all they do is to give the warning about not giving the seed phrase to anybody.

[joniboini]

Realistically, what can they do to appease customers, though? Even if they promise to choose a better payment processor with better data security, there's no guarantee they won't do another fuck-up. Anyway, it's another reason to avoid Ledger.

People definitely need to assume their data will be leaked in one way or another in the future. The number of data breaches is numerous, from government to major businesses. Hopefully, this will improve our awareness of phishing attacks that seem to happen more often.