As announced by Ledger, 20,000 new customer records have been leaked due to a breach and are now circulating online.
According to Ledger, it was unaware of the 20,000 additional records until they were disclosed by Shopify on December 23.
Shopify said that “ members of its support team obtained customer transaction records, including those from Ledger. The agents illegally exported customer transaction records in April and June 2020. ”
With this latest discovery, the total amount of Ledger customer records that have fallen into the hands of malicious actors now reaches 292,000.
This isn’t the first time Ledger has been wrong about its estimates regarding a security breach. In July 2020, it was revealed that the company had been the victim of an attackthat resulted in the theft of 1 million customer email addresses and other identifying information. At the time, Ledger believed that only 9,500 of its customers had been affected. The information leaked at the time included email addresses as well as customers’ first and last names, mailing addresses, phone numbers, and information about products they had ordered. However, in December 2020, it was revealed that 272,000 names, mailing addresses, and phone numbers were stolen during the data breach.
The company discovered this when some of these files were posted on RaidForums, a marketplace for selling and sharing compromised information.
Since the initial breach occurred and data on RaidForums, Ledger customers have been the victims of phishing attacksandhave received threatening messages from hackers via phone and email.
The security breach has shaken the trust of Ledger's customers in the company, as it has been proven that their information is very easy to steal. Moreover, the company has not addressed the breach with due importance, nor the damage it has caused to its customers.
Those who have a Ledger hard wallet should be on the lookout for attacks .
