Ledger, Trezor and Others: Hack Allegations are Baseless, Lack Proof

gepubliceerd op by Cointele | gepubliceerd op

Vermeld in dit artikel
According to a report by an online monitoring web portal, Under the Breach, a hacker was able to penetrate the privacy protocols of major firms such as Trezor, Ledger and Bnktothefuture on May 24 and walk away with a host of sensitive customer data, including email addresses, home addresses and phone numbers.

It now appears as though this so-called data breach has been a major false-flag, since many of the companies linked with the hack have come forth to say that Under the Breach's claims are not grounded in any factual evidence.

The firm released a detailed blog post stating that the rumor about the leaked customer data being from Ledger's e-shop was a hoax and that the company's security team had investigated the sample data and confirmed that it did not match its native client information.

Lastly, in addressing concerns regarding the hacker's claim that they were able to gain access to Ledger's client database through a 2016 Shopify exploit, the hardware wallet manufacturer's security team stated that while Ledger currently employs Shopify as a third-party provider for its e-commerce operations, the same was not the case back in 2016.Companies debunk the breachTo get a better overview of all that transpired since the hacking rumor went viral online, Cointelegraph reached out to Matthieu Riou, chief technical officer and co-founder of BlockCypher, a cloud-optimized platform powering blockchain applications that allegedly had its data compromised.

He added: "We've now been running on the new improved platform for several years and have had no issues. We can't speak as to the severity or recentness of the data dumps originating from other firms."

Lastly, Marek Palatinus, CEO of SatoshiLabs - the company behind Trezor's various hardware wallets - told Cointelegraph that it is important for people to understand that the "Data breach is not legit" and consists primarily of information that is fabricated.

"Even if the data was leaked from any of the mentioned party e-shops, the hardware wallet secret keys were not exposed, therefore the hacker or any other potential person that gets hold of the database won't get access to your secret keys stored on a hardware wallet. Trezor does not collect any data from your hardware wallet or Trezor Wallet app."

Another aspect of this recent data breach is that the hacker claimed to have obtained a host of customer information from prominent crypto exchanges and investment platforms such as Coinigy, BitSo and Plutus.

Jumping the gunOn May 19, BlockFi reported a data breach that arose due to a sim-swap attack, resulting in compromised customer data held by the company, such as full names, email addresses, date of birth and physical addresses.

Etana, a custody firm that services the crypto exchange Kraken, also fell victim to a similar data breach last month.

x