Ledger Issues Update on Data Breach That Leaked Personal Information of 272,000 Customers

The CEO of crypto hardware wallet maker Ledger has posted a letter to hundreds of thousands of customers whose personal information was stolen in a company data breach and subsequently posted online.

Back in July, the Paris-based company had initially reported that hackers accessed one million email addresses in the breach but only stole the detailed personal info of 9,500 customers.

Now, however, leaked information from hackers shows the attack actually accessed the personal info, including first and last names, telephone numbers, postal addresses, and product order histories of 272,000 customers, according to Ledger chief executive Pascal Gauthier.

“In Ledger’s name, we very deeply regret this situation. We are aware that many of you have been targeted by e-mail and SMS phishing campaigns and that it’s clearly a nuisance. I know this breach is disappointing at best and infuriating at worst.”

Ledger customers have expressed concerns that the leaked shipping addresses expose them to the risk of physical attack.

Gauthier, who says the company won’t be refunding customers in response to the breach, encourages people to keep their recovery sheets in a bank vault instead of at home.

Ledger says the hack itself did not expose the private keys or recovery phrases of any hardware wallets.

“To be very clear: this data breach has no link nor impact on our hardware wallets, the app or your funds. Your crypto assets are safe. While very truly and sincerely regrettable, this breach concerns only e-commerce related information.”

Featured Image: Shutterstock/oOhyperblaster