Physical Addresses of 270K Ledger Owners Leaked On Hacker Forum (bleepingcomputer.com) 10
A threat actor has leaked the stolen email and mailing addresses for Ledger cryptocurrency wallet users on a hacker forum for free. BleepingComputer reports: Ledger is a hardware cryptocurrency wallet that is used to store, manage, and sell cryptocurrency. The funds held in these wallets are secured using a 24-word recovery phrase and an optional secret passphrase that only the owner knows. In June 2020, Ledger suffered a data breach after a website vulnerability allowed threat actors to access customers' contact details. Today, a threat actor has shared an archive containing two files named 'All Emails (Subscription).txt' and 'Ledger Orders (Buyers) only.txt' that contain data stolen during the data breach.
The 'All Emails (Subscription).txt' text file contains the email addresses of 1,075,382 people who subscribed to the Ledger newsletter. The 'Ledger Orders (Buyers) only.txt' is more sensitive as it contains the names, mailing addresses, and phone numbers for 272,853 people who purchased a Ledger device. The release of this data on a hacker forum poses a significant risk as it provides numerous threat actors data that can be used in phishing attacks against Ledger owners.
The 'All Emails (Subscription).txt' text file contains the email addresses of 1,075,382 people who subscribed to the Ledger newsletter. The 'Ledger Orders (Buyers) only.txt' is more sensitive as it contains the names, mailing addresses, and phone numbers for 272,853 people who purchased a Ledger device. The release of this data on a hacker forum poses a significant risk as it provides numerous threat actors data that can be used in phishing attacks against Ledger owners.
"phishing attacks"? sure, physical attacks? ouch! (Score:3)
Re: (Score:2)
$5 wrench attacks and sim swaps.
Hardware Wallet (Score:2)
Why would Ledger have anything other than a throw-away e-mail address and a dead drop mailbox for me? Not that I'm planning any black market activities. But one attraction of Bitcoin and hardware wallet solutions is the ability to stuff the thing into my pocket, travel across borders and leave no link back to The Real Me. If the hackers can track me, so can my government.
Re: (Score:2)
OpSec isn't necessarily the priority of a lot of people - Bitcoin users are probably using it as an investment and they hear you should us
Finally (Score:1)
Great! (Score:2)
Anything to bring down or undermine criminals' confidence in the "security" of Cryptocurrency (and thus help bring down its main use, Ransomware Payments), is just fine by me!
This is one data breach I, for one, would love to see much more of...
Sorry Woz! (see, WOZX).
Venn Diagram (Score:2)
Damn! (Score:2)
Does that mean I can risk losing my 1337 Dogecoins?!