Hardware wallet provider Ledger has reportedly suffered from another breach. The new data breach involved leaking of customer details on public domains.
A client on crypto Twitter with the handle ‘Jimmy McShill’ (@JimmyMcShill) posted screen captures of documents that have been transferred to forums purportedly containing the full information of Ledger client’s messages, telephone numbers, and addresses.
⚠️⚠️ Uhh shiit! A hacker is dumping the full @Ledger database dump for free on raidforums! Emails, phone numbers and addresses!
Get ready for a huge spam and phishing wave!#bitcoin #cryptcurrencies #phishing #security pic.twitter.com/XAQQHZ2wkW— Jimmy McShill (@JimmyMcShill) December 20, 2020
Ledger explained their plight by responding to the tweet.
They answered saying, that they believe the data seen on the forum is from a previous breach and not a new attack.
Today we were alerted to the dump of the contents of a Ledger customer database on Raidforum. We are still confirming, but early signs tell us that this indeed could be the contents of our e-commerce database from June, 2020.
— Ledger (@Ledger) December 20, 2020
It is still indistinct whether this is another attack or it is the uploading of data from the primary breach which happened in June this year. The breach then led to the leaking of over 1,000,000 client email addresses.
Following the breach, Ledger clients were attacked by scammers and phishing assaults. Some of the schemes used persuaded clients to download counterfeit Ledger programming or uncovering their key phrases. This shows that the information on different forums may have been leaked long ago. It may also suggest that this could be another arrangement of client information.
Leaks and Losses
One Ledger casualty, an industry researcher and columnist expressed his displeasure. He explained that his device was hacked remotely and the hackers cleared out his account.
They did this by few unapproved exchanges bringing about the deficiency of around $16,000 at the time in late 2019.
His wallet was secured with a key phrase in another safe. They were neither broken into nor gotten to so he was puzzled to find that the safe had been depleted of all assets by three exchanges he didn’t authorize.
Understanding that there was a minimal possibility of recovering the losses. He contacted Ledger to attempt to discover how this might have occurred to caution others.
The firm was unaccommodating, basically just sending a letter of apology and not in any event, ready to examine the fake exchanges.
The continual leaking of more personal data should be a concern to Ledger clients. They should be cautious about potential assaults that could now begin to target them directly.
