One more reason to avoid 3rd parties
at any cost. It's completely sick to see how Ledger handled this. Collecting so much data and storing it instead of deleting it immediately (which would be risk enough) they are storing it insecurely. Insane.
I would imagine that they know, as leading hardware wallet manufacturer, that they are increasily targeted by hackers, especially when Bitcoin gets more famous.
So now, we have local criminals using stolen addresses of crypto owners, criminals who know exactly that these people are likely holding crypto and where they live. Good riddance.
https://xkcd.com/538/Luckily I haven't bought one and I will more than ever avoid to buy one and sending them my personal data. Their devices are a good solution, yes, but I see too many downsides compared to using my personaly paper wallets.
And some sort of downplaying the issue by trying to cover it up is even more insane. Maybe they didn't know how many users were hacked, it's really hard to tell...
When you buy a hardware wallet via official Ledger website the following information is collected; it stored for a long time:
- Your name (first name, last name);
- Your e-mail address;
- Your postmail address;
- Your phone number;
- Your physical address and other contact details;
- Your credit card number;
- Your other payment information;
- When you contact customer support, they will record and store their correspondence with you;
- You also may be asked to perform a small
KYC procedure when contact customer support;
- Your IP address;
- Your operating system;
- The type of device you use;
- Date and time you visit the website;
- Browsing Data (information about your visit including the URL clickstream to, through and from our website, products you viewed or searched for, download errors, length of visits to certain pages, page interaction)
Source:
https://shop.ledger.com/pages/privacy-policyThat's insanely irresponsible...