Nuevo leak confirmado de Ledger. Esta vez a traves de Shopify

Pues parece que ha habido otro leak de Shopify e incluye de nuevo los datos de Ledger...

"Ledger Security Notice


Dear client,
On December 23, 2020, Shopify, our e-commerce service provider, informed Ledger of an incident involving merchant data. Rogue agent(s) of their customer support team obtained Ledger customer transactional records in April and June 2020. This is related to the incident reported by Shopify in September 2020, which concerns more than 200 merchants, but until December 21, 2020, Shopify had not identified this affected Ledger as well.
We were able to examine the stolen data together with a third party forensic firm to identify the impacted customers.
We regret to inform you that you are part of the customers whose detailed personal information was stolen by Shopify rogue agent(s). Specifically, your name and surname, detail of product(s) ordered, phone number and your postal address were exposed.
We notified the French Data Protection Authority on December 26, 2020. We are continuing to work with Shopify and law enforcement on the case; an investigation is already underway, led by the FBI and the RCMP. Ledger also reported the events to the French Public Prosecutor and filed a complaint against the rogue agent(s).
Thefts and attacks such as this cannot go uninvestigated or unprosecuted. We continue to work with law enforcement as well as private investigators on these cases, and we are adding more firepower by hiring additional private investigation capacity, adding experience and approaches to finding those responsible for these data thefts.
FINALLY, keeping you secure is our reason for existing. We will soon release a technical solution that will remove the 24 words as the single pillar of the security of our hardware wallets and will open the door to funds insurance.
If you would like more detail on the many steps we are taking to prevent such incidents in the future, please read this blog post.


Sincerely, Pascal Gauthier Ledger CEO"

Aqui teneis el link a Ledger con el update. La verdad es que ya empieza a ser de coña.

https://www.ledger.com/blog/update-e...e-the-scammers

Pole y

Se cumple lo de que nunca hay dos sin tres!

Trezor va aumentar mucho sus ventas

Joder, vaya inutiles

Al final va a resultar que la mejor opcion era comprarlo a traves de amazon

Me cago en su puta madre, me ha llegado ese email

Yo lo hice así, pura suerte. ¿Donde se podían mirar los datos filtrados?

If you purchased a Ledger product after the end of June, 2020, or if you purchased your product outside of Ledger.com, your data was not exposed in these incidents.

El título puede llevar a confusión, shur, ya que parece que se han vuelto a filtrar datos de compras recientes y no es así.

No se habrán expuesto datos "recientes" pero se han expuesto datos que se creían no expuestos. Hijos de la gran puta..

No es el mismo breach segun su info en la web eh?:

"Concerning the data breach discovered on July 14th We patched the breach on July 14th, 2020. On July 17th, 2020 we notified the French Data Protection Authority. We began conducting forensics with Orange Cyberdefense on July 20th, 2020. It was necessary and prudent to complete the investigation with Orange Cyberdefense and gather as many facts as possible before communicating the data breach to our customers.
As soon as we had the final report we sent an email to our entire email database on July 29th, 2020. We informed the media about the situation via a press release the same day. We filed a complaint with the French public prosecutor on August 5th, 2020.



Concerning the Shopify data breach
The investigation into the incident involving Shopify is ongoing and we will continue to update you as the situation unfolds. As of today: We notified the French Data Protection Authority on December 26th, 2020. After completing forensics with Orange Cyberdefense we informed all customers affected by this breach via email on January 13th, 2021. We continue to work with Shopify and prosecutors on the case; an investigation is already underway, led by the FBI and the RCMP. Ledger also reported the events to the French Public Prosecutor and filed a complaint against the rogue agent(s). We are continuing to work with Shopify using new internal processes to ensure enhanced security."

Vaya vergüenza de compañía, lamentable

Y aún hay gente en este mismo foro recomendándoles....xd

De todos modos no viene mal para bajar algunos de las nubes....

Incluso empresas sin fugas como la de trezor.....siguen con incógnitas al respecto.

Es que si te da por desconfiar incluso los trasvases a tu wallet los haces a través de su web o applicacion, así que nadie te asegura al 100% que incluso la empresa no pueda hackearte esas conexiones.

Al final nadie es libre, porque estás atado a pasar no sólo por su dispositivo wallet, si no que estás atado a usar su plataforma para realizar la conexion con el blockchain, por lo tanto nada te puede salvar de un hackeo.

Yo al menos, así lo veo.