Ledger and Shopify hit by class-action over data breach

Roche Freedman, a law firm, filed a class-action suit in San Francisco against Ledger, the hardware-wallet maker, and Shopify over a data leak in the summer of 2020. According to The Block.

According to the report, the firm is known for filing complaints against Binance, Tron and iFinex, the parent company of Tether and Bitfinex. Roche Freedman also represents the client’s interests of the crypto-lending provider Nexo.

“We have been investigating since information about the Ledger user data leak emerged, including consulting cybersecurity and cryptocurrency experts,” Roche Freedman said.

Lawyers say that Ledger, in fulfilling its obligations to customers, should have ensured the security of the Shopify service. The companies will have to explain why they delayed notifying users of the issue. The damages are estimated at more than $5 million.

Ledger’s chief legal officer Antoine Tibo said that the manufacturer “does not comment on current legal questions.”

“However, Ledger would like to remind our clients again that they should never disclose the 24-word recovery phrase and should not confirm the recipient’s identity. You alone fully control access to your funds,” added Tibo.

As previously reported, data from millions of Ledger users was leaked on June 25, 2020. An unknown party gained access to the email addresses, names, and phone numbers of users.

In late October, a user known as Polaris posted the database on the hacker forum exploit.in. A user going by hyperdrill bought the data for 5 BTC.

On December 21, Ledger hardware-wallet user data fell into otopen access through the Raidforums forum, where anyone could download it.