Ledger faces $500 million class action over data breaches
Hardware crypto wallet maker Ledger is facing a class action seeking at least $500 million over a series of customer data breaches. The plaintiff claims the company failed to adequately protect customers' personal information and did not take sufficient measures following previous incidents.
The lawsuit was filed on August 27 by Ledger user Douglas Kim, who claims he lost nearly $2 million in cryptocurrency. According to the complaint, attackers used information obtained from incidents in 2020 and 2023 to specifically target his crypto assets.
The complaint alleges a "systematic" disregard for the security and privacy of customers' personal data. The plaintiff also accuses Ledger of downplaying the impact of the incidents and failing to promptly inform users about the risks.
Lawsuit focuses on 2020 and 2023 breaches
In 2020, a breach of Ledger's database exposed the personal information of nearly 300,000 customers. The information subsequently appeared on a marketplace where stolen data was distributed.
According to the plaintiff, the exposure of personal information created opportunities for subsequent targeted attacks against hardware wallet owners. Attackers could use information identifying a particular person as a Ledger customer for phishing and other forms of social engineering.
A separate incident in 2023 affected Ledger Connect Kit. After a former employee's account was compromised, attackers distributed a malicious version of the software capable of redirecting users' cryptocurrency transactions.
The plaintiff claims Ledger not only failed to adequately protect customer data but also did not take sufficient steps after the incidents to prevent similar cases. He argues that timely warnings would have allowed customers to better protect themselves against subsequent attacks.
Plaintiff seeks at least $500 million
The lawsuit also alleges that Ledger's actions may have violated New York's Stop Hacks and Improve Electronic Data Security Act, which establishes requirements for protecting personal information. The claims also include negligence.
The plaintiff is seeking at least $500 million in damages. Depending on the number of class members and the damages established, the total amount sought could potentially reach several billion dollars. He has also requested a jury trial.
The lawsuit does not mention another incident in 2026, when Ledger customer data was compromised following a breach at third-party payment provider Global-e.
In August, Ledger introduced a new transaction-signing device and crypto wallet, offering an alternative approach to standard digital asset security models. The company continues to expand its product lineup amid growing attention to the security of crypto self-custody.
Earlier, we reported that Ledger urged cryptocurrency holders to use self-custody to reduce their dependence on restrictions and delistings at centralized platforms. The company positions hardware wallets as a way for users to maintain direct control over their digital assets.
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
