All right, thanks for explaining o_e_l_e_o!

It is really a ridiculous report. Ledger deleting customer's personal data after a huge leak is like starting to wear condoms for your own protection after being infected with AIDS. Very useful.

I don't think Ledger can be held responsible for the data that Shopify customer service reps stole. Some people are suggesting they are. They can be held responsible for using and trusting Shopify with their customer's private data, but not what happens on Shopify.

It seems that the situation with phishing emails is slowing down. Me and my friend haven't seen any new scamming attempts for weeks. But the scammers aren't asleep and they are trying new things. I just noticed one example that ended up in a spam folder on an email address that is not connected with my Ledger purchase. The mail was sent 2 days ago.   

They are now expanding the scope of their activities to Trezor users hoping that the same group that purchased Ledger hardware wallets, own Trezor devices as well. The content of the email is pretty much the same. Customers are informed that Trezor servers have been hacked and infected with malware. To prevent the loss of funds, they instruct users to download updated software and input their seed phrases.

There is a "Search engine" for the database leak here: https://www.argent.xyz/ledgerhack/

You simply enter your email address associated with your Ledger purchase and it will tell you if:

a. it didn't find that email address at all
b. it found only your email address in the leaked data
c. it found your email address and other details like address and phone number etc in the leaked data

They say they won't store your email address... at worst, they might be creating their own list of "ledger owner email addresses"... at best they're doing the community a favour. Up to you to decide if you trust them or not.

Email address isn't a "huge" deal... they're easy enough to change and/or filter... you'll just get spam... and likely face hacking attempts on your email accounts (make sure your passwords are strong!)

Phone number is relatively annoying... no so easy to change and/or filter... people are being bombarded with texts and robo-calls. Also, opens you up to the possibility of "sim swap" attack, so any SMS based 2FA could be at risk.

Address is "dangerous"... at the very extreme, you could potentially face the threat of home invasion.

Yes i know about that on the haveibeenpwned site.  But i wonder if entering email address on the one hcp posted would be good or not because wouldn't they record any email address typed in though even though it says it won't?  Like if someone enters an email address on that site...its because well they want to see if their info is there which mean they own a ledger.  So you are saying anyone that put their email address in it... surely that person can see every email entered right?


I received targeting phishing emails a while back... the ones where it say we see your ledger has been logged in russia or some country like that etc.  Also i receive ton of crypto like spam email... but its possibly that is coincidence?  I got to assume maybe even regular people receive ton of that spam mail nowadays?

And I get emails that I have watched adult movies and they recorded it on webcam. But that can't be possible because I don't have a Webcam.......at that PC.  
Once the scammers have your email adress you get bombarded with spam emails.

I don't believe i received that email of your assets are at risk and you need to download new version of ledger live.... i dont believe so but i will check.


But if you receive that, very good chance the other things are leaked then right?

What i do know is my email when i put it on that site of haveibeenpwned.com does show yes though.


But of course im not sure putting my ledger email in that site is thus safe etc.


So i guess if you didn't get that specific email message of you need to download ledger live and update it... then most likely your are fine?  Now anyone here get any spam to phone number though?  Since its been said phone number could be leaked?

You would have gotten multiple email messages by now if your email was among the leaked ones. They can't have possible missed you when the amount of spam even spilled over to email addresses that weren't part of the database hack. 

It's irrelevant to you and that information can't help you in any way. My name was in the database hack together with personal details of my friend who received the package in my name. His phone number is in there, but he has not received any SMS messages or spam calls. Even if he did, it doesn't impact you in any way. He has received dozens of emails though.