Ledger Data published on RaidForums! Ledger Data containing over 1 million piece of user’s personal identification information has been published on RaidForums, a marketplace for buying, selling, and sharing hacked information. 1 million email addresses and 272,000 customer’s first and last names, postal addresses, and phone numbers were published.
When Ledger was breached on June 25th of this year, they had said that only 9,500 customers’ information was compromised. This clearly shows that Ledger was incorrect.
Unfortunately, it seems that the information of Ledger Users are in the wild and in the hands of individuals looking to scam people out of their money. Attackers are reportedly already using information from RaidForums to scam. Defraud, and blackmail Ledger users.
A Reddit user that goes by ‘relephants’ posted a message on r/ledgerwallet warning others that he is being targeted by attackers that have his email address and phone number.
The attacker requested that relephants pay $500 to a wallet address – they claim to know where they live and said they are “not afraid to show up when you least expect it”.
Ledger can do nothing to combat this – the damage is irreversible and complete. The only recourse they can offer, and are offering, is advice and guidance regarding phishing attacks from attackers that have consumer data.
Ledger has set up a website that provides an overview of some of the phishing scams that have happened to date so that users can know not to fall for the same attacks if they are directed toward them. Ledger claims that they’ve successfully shut down 171 phishing websites that capitalized on the stolen consumer data.
What do you think? Let us know on our Facebook page!
