Wall Observer BTC/USD - Bitcoin price movement tracking & discussion

[Globb0]

A hacker is dumping the Ledger database for free on forums.. emails, phone numbers, addresses etc..

Expect huge spam and phishing waves for people owning a Ledger.

Click on this link if you think your data has been compromised.

I have gotten at least 20 spam emails.  /yawn

Fuck you hackers Im not even good enough for a phish   

[OutOfMemory]

A hacker is dumping the Ledger database for free on forums.. emails, phone numbers, addresses etc..

Expect huge spam and phishing waves for people owning a Ledger.

Click on this link if you think your data has been compromised.

I have gotten at least 20 spam emails.  /yawn

What this hacker is doing is putting people at serious risk of physical extortion attacks! People may be be kidnapped, tortured and even killed because of his actions. This is a criminal act, and I really hope this hacker is found, arrested and put to jail for life.

That's not even a hacker. It's a troll.
If ledger doesnt grant my "right to be forgotten" as an EU company, to an EU citizen, they're gonna get into trouble, i swear.
They have to send me a proof of deletion. I soon will issue an ultimatum, otherwise my lawyers phone will ring my tune.
News coverage of ledger trying to escape the law would be candy.
[/angry mode]

[serveria.com]

A hacker is dumping the Ledger database for free on forums.. emails, phone numbers, addresses etc..

Expect huge spam and phishing waves for people owning a Ledger.

Click on this link if you think your data has been compromised.

I have gotten at least 20 spam emails.  /yawn

Sue the Ledger bastards! 

[AlcoHoDL]

A hacker is dumping the Ledger database for free on forums.. emails, phone numbers, addresses etc..

Expect huge spam and phishing waves for people owning a Ledger.

Click on this link if you think your data has been compromised.

I have gotten at least 20 spam emails.  /yawn

What this hacker is doing is putting people at serious risk of physical extortion attacks! People may be be kidnapped, tortured and even killed because of his actions. This is a criminal act, and I really hope this hacker is found, arrested and put to jail for life.

That's not even a hacker. It's a troll.
If ledger doesnt grant my "right to be forgotten" as an EU company, to an EU citizen, they're gonna get into trouble, i swear.
They have to send me a proof of deletion. I soon will issue an ultimatum, otherwise my lawyers phone will ring my tune.
News coverage of ledger trying to escape the law would be candy.
[/angry mode]

I'm with you on this. I was not affected, purely out of luck (purchased a Ledger from those jokers in 2017—one year before the leaked data), but I'm pretty sure they still have my details.

I'm an EU citizen too. If there is a law or other legal/official info I can use to threaten them in the email I'm going to send them, please let me know, either publicly (maybe here, for the benefit of all), or via PM. I also want to make sure they completely erase my data from their servers.

And I do hope they go bankrupt—I think they will, given that their blunder directly negates their sales pitch for their h/w wallets. Who, in their right mind, would buy a Ledger, or use their online services, after what happened? The Ledger may be a solid product, but I prefer the mafia way of dealing with such issues: "When in doubt, kill 'em all!"

[Globb0]

Im not stupid enough to type my details into any internet "have I been hacked" search engine.

But had no spam so far.

[bitcoinPsycho]

[AlcoHoDL]

Im not stupid enough to type my details into any internet "have I been hacked" search engine.

But had no spam so far.

No need. You can download the leaked files and search yourself using a text editor. That's what I did.

[El duderino_]

2 4, 7 7 7.
A three year old game, .2 5
Could be won... soon-ish....

Do you have a link to the old game buddy?

Yes it’s on one of the last pages here .... (the full list of participants somewhere on page 18937 I think)

https://asktom.cf/index.php?topic=178336.msg26767496;topicseen#msg26767496
^
This is the real start of that game

[OutOfMemory]

A hacker is dumping the Ledger database for free on forums.. emails, phone numbers, addresses etc..

Expect huge spam and phishing waves for people owning a Ledger.

Click on this link if you think your data has been compromised.

I have gotten at least 20 spam emails.  /yawn

What this hacker is doing is putting people at serious risk of physical extortion attacks! People may be be kidnapped, tortured and even killed because of his actions. This is a criminal act, and I really hope this hacker is found, arrested and put to jail for life.

That's not even a hacker. It's a troll.
If ledger doesnt grant my "right to be forgotten" as an EU company, to an EU citizen, they're gonna get into trouble, i swear.
They have to send me a proof of deletion. I soon will issue an ultimatum, otherwise my lawyers phone will ring my tune.
News coverage of ledger trying to escape the law would be candy.
[/angry mode]

I'm with you on this. I was not affected, purely out of luck (purchased a Ledger from those jokers in 2017—one year before the leaked data), but I'm pretty sure they still have my details.

I'm an EU citizen too. If there is a law or other legal/official info I can use to threaten them in the email I'm going to send them, please let me know, either publicly (maybe here, for the benefit of all), or via PM. I also want to make sure they completely erase my data from their servers.

And I do hope they go bankrupt—I think they will, given that their blunder directly negates their sales pitch for their h/w wallets. Who, in their right mind, would buy a Ledger, or use their online services, after what happened? The Ledger may be a solid product, but I prefer the mafia way of dealing with such issues: "When in doubt, kill 'em all!"

I was lucky too, not affected.
I also browsed and searched the leaked content, and there are surprisingly more customers in my area (within 50km) than i thought.
However, to every name i was visualizing a face getting smashed with a hammer, so i quit sniffing in the file.

Here's your pointer:

https://gdpr-info.eu/art-17-gdpr/

[gembitz]

i got old ledger wallets cheap! harhar

[Globb0]

Im not stupid enough to type my details into any internet "have I been hacked" search engine.

But had no spam so far.

No need. You can download the leaked files and search yourself using a text editor. That's what I did.

yeah but its not much different from a list of people who brought expensive hot tubs.

Sure some may be rich, some might just like hot tubs.


There are much easier ways for crooks to find rich people.

The paranoia level here is like a feedback loop.

[AlcoHoDL]

I'm with you on this. I was not affected, purely out of luck (purchased a Ledger from those jokers in 2017—one year before the leaked data), but I'm pretty sure they still have my details.

I'm an EU citizen too. If there is a law or other legal/official info I can use to threaten them in the email I'm going to send them, please let me know, either publicly (maybe here, for the benefit of all), or via PM. I also want to make sure they completely erase my data from their servers.

And I do hope they go bankrupt—I think they will, given that their blunder directly negates their sales pitch for their h/w wallets. Who, in their right mind, would buy a Ledger, or use their online services, after what happened? The Ledger may be a solid product, but I prefer the mafia way of dealing with such issues: "When in doubt, kill 'em all!"

I was lucky too, not affected.
I also browsed and searched the leaked content, and there are surprisingly more customers in my area (within 50km) than i thought.
However, to every name i was visualizing a face getting smashed with a hammer, so i quit sniffing in the file.

Here's your pointer:

https://gdpr-info.eu/art-17-gdpr/

Fixed your link above. Need to remove the extra "http://" and all quotes from the BBCode.

Thanks for this.

[AlcoHoDL]

Im not stupid enough to type my details into any internet "have I been hacked" search engine.

But had no spam so far.

No need. You can download the leaked files and search yourself using a text editor. That's what I did.

yeah but its not much different from a list of people who brought expensive hot tubs.

Sure some may be rich, some might just like hot tubs.

There are much easier ways for crooks to find rich people.

The paranoia level here is like a feedback loop.

I just suggested a secure way to check if you're on the list...

I think the more immediate threat for those affected is the spam/phishing flooding of their email accounts. But it is possible that some (hopefully none) could face physical harassment too.

[tertius993]

Anyone else feel that this $22.5k - $23.5k somewhat sideways movement is similar to the time spent bouncing around 19k a few weeks back?  Up a bit, down a bit but always returning to some form of equilibrium at a similar level.

[bitserve]

Im not stupid enough to type my details into any internet "have I been hacked" search engine.

But had no spam so far.

No need. You can download the leaked files and search yourself using a text editor. That's what I did.

yeah but its not much different from a list of people who brought expensive hot tubs.

Sure some may be rich, some might just like hot tubs.

There are much easier ways for crooks to find rich people.

The paranoia level here is like a feedback loop.

I just suggested a secure way to check if you're on the list...

I think the more immediate threat for those affected is the spam/phishing flooding of their email accounts. But it is possible that some (hopefully none) could face physical harassment too.

There are 273K customers on the list. That's not a partial database. You bought from them before the leak and you should be there. With whatever data you provided to them. The "persona" I provided to them is in fact there.

This is something that "happens" but at the same time it is something that should not have happened. What angers me the most is that they lied in saying it was only a very partial list with only 9K customers when it is indeed the whole list.

Many, if not most, of the addresses in the list look like real home addresses (maybe not their own though) no P.O. boxes or business.

The only good thing is that the list is so big (in fact there is way more people in some zones than I would have ever guessed) that it "dilutes" the focus of any potential "attacker". Also, like Globb0 said it doesn't mean those do have a big amount of BTC (maybe not even BTC, just worthless shitcoins) nor that they do still have anything anymore.

Not a dull day in Bitcoinland....

[Karartma1]

I am glad those ledger suckers only have my email.

[OutOfMemory]

Im not stupid enough to type my details into any internet "have I been hacked" search engine.

But had no spam so far.

No need. You can download the leaked files and search yourself using a text editor. That's what I did.

yeah but its not much different from a list of people who brought expensive hot tubs.

Sure some may be rich, some might just like hot tubs.

There are much easier ways for crooks to find rich people.

The paranoia level here is like a feedback loop.

I just suggested a secure way to check if you're on the list...

I think the more immediate threat for those affected is the spam/phishing flooding of their email accounts. But it is possible that some (hopefully none) could face physical harassment too.

There are 273K customers on the list. That's not a partial database. You bought from them before the leak and you should be there. With whatever data you provided to them. The "persona" I provided to them is in fact there.

This is something that "happens" but at the same time it is something that should not have happened. What angers me the most is that they lied in saying it was only a very partial list with only 9K customers when it is indeed the whole list.

Many, if not most, of the addresses in the list look like real home addresses (maybe not their own though) no P.O. boxes or business.

The only good thing is that the list is so big (in fact there is way more people in some zones than I would have ever guessed) that it "dilutes" the focus of any potential "attacker". Also, like Globb0 said it doesn't mean those do have a big amount of BTC (maybe not even BTC, just worthless shitcoins) nor that they do still have anything anymore.

Not a dull day in Bitcoinland....

Nope. They clear their e-commerce database from time to time, iirc once a year.
This one got leaked, with data from a certain timespan.
They outsourced their shop and the shop software was vulnerable.
It's not the customer database, which is not accessible from the internet, where all customer data is stored.

[bitserve]

Im not stupid enough to type my details into any internet "have I been hacked" search engine.

But had no spam so far.

No need. You can download the leaked files and search yourself using a text editor. That's what I did.

yeah but its not much different from a list of people who brought expensive hot tubs.

Sure some may be rich, some might just like hot tubs.

There are much easier ways for crooks to find rich people.

The paranoia level here is like a feedback loop.

I just suggested a secure way to check if you're on the list...

I think the more immediate threat for those affected is the spam/phishing flooding of their email accounts. But it is possible that some (hopefully none) could face physical harassment too.

There are 273K customers on the list. That's not a partial database. You bought from them before the leak and you should be there. With whatever data you provided to them. The "persona" I provided to them is in fact there.

This is something that "happens" but at the same time it is something that should not have happened. What angers me the most is that they lied in saying it was only a very partial list with only 9K customers when it is indeed the whole list.

Many, if not most, of the addresses in the list look like real home addresses (maybe not their own though) no P.O. boxes or business.

The only good thing is that the list is so big (in fact there is way more people in some zones than I would have ever guessed) that it "dilutes" the focus of any potential "attacker". Also, like Globb0 said it doesn't mean those do have a big amount of BTC (maybe not even BTC, just worthless shitcoins) nor that they do still have anything anymore.

Not a dull day in Bitcoinland....

Nope. They clear their e-commerce database from time to time, iirc once a year.
This one got leaked, with data from a certain timespan.
They outsourced their shop and the shop software was vulnerable.
It's not the customer database, which is not accessible from the internet, where all customer data is stored.

Then it is the full database since they outsourced the shop till June 2020 (if they are not lying again). 273K customers is a lot of customers and way more than the 9K they initially said had been compromised.

Do we know the dates from and to of the data compromised?

[AlcoHoDL]

There are 273K customers on the list. That's not a partial database. You bought from them before the leak and you should be there. With whatever data you provided to them. The "persona" I provided to them is in fact there.

[...]

272,853 customers to be exact. I have the file open in front of me now, and, no, I'm not in the list (fortunately)!

It's a kind of weird feeling to see in front of me so many emails, full names, addresses, phone numbers... Several of them in my own neighbourhood. The list is so large, that anyone anywhere could possibly find a Ledger owner close by...

This should make us all aware of the implications of submitting our personal details to different sites on the net. We should not take this lightly.

Do we know the dates from and to of the data compromised?

The leaked files do not contain date information. They are in this format:

File 1: Just email addresses (those in Ledger's mailing list)
File 2: Email | Full Name | Address 1 | Address 2 | State/Country | Telephone Number

[serveria.com]

There are 273K customers on the list. That's not a partial database. You bought from them before the leak and you should be there. With whatever data you provided to them. The "persona" I provided to them is in fact there.

[...]

272,853 customers to be exact. I have the file open in front of me now, and, no, I'm not in the list (fortunately)!

It's a kind of weird feeling to see in front of me so many emails, full names, addresses, phone numbers... Several of them in my own neighbourhood. The list is so large, that anyone anywhere could possibly find a Ledger owner close by...

This should make us all aware of the implications of submitting our personal details to different sites on the net. We should not take this lightly.

Did I miss something? Where can I see the list?