Ledger to pay 10 BTC for information leading to arrests of cybercriminals behind a string of attacks and data breaches

The hardware-wallet developer Ledger will pay 10 BTC to users for helping locate cybercriminals responsible for a series of attacks and data breaches.

Recently, we shared news of a data dump. On December 23, we were alerted by our e-commerce provider Shopify about an incident in April & June ’20 where their rogue team members exported merchants’ customer databases. Ledger was included. More details: https://t.co/NHU3IbDL0a pic.twitter.com/DHQQ9arxCu

— Ledger (@Ledger) January 13, 2021

Users can claim rewards for information that leads to the identification, arrest and successful prosecution of the perpetrators.

The company has also hired private investigators and plans to cooperate with other industry participants and law enforcement agencies as part of the investigation.

To enhance security, Ledger will reduce the number of places where wallet-holder data is displayed.

“Our goal is to remove your personal data — such as your name, address and phone number — as quickly as possible,” the company blog says.

In the release, the company also announced the launch of a new technical solution that will allow customers to insure their funds.

Earlier, the data leak of one million Ledger users occurred on June 25, 2020. An unknown party gained access to users’ email addresses, names and phone numbers.

In late October, a user going by the nickname Polaris posted the database on the hacker forum exploit.in. User hyperdrill bought the data for 5 BTC.

On December 21, Ledger’s hardware-wallet user data became publicly accessible through the Raidforums forum, where anyone could download them.

Subscribe to ForkLog’s channel on YouTube!