Hardware cryptocurrency wallet manufacturer Ledger has once again come under the scrutiny of lawyers. This time, the company is facing a class-action lawsuit filed by users whose personal data may have been exposed to the public as a result of an incident that occurred in 2023.
The essence of the claims boils down to the fact that the company allegedly failed to ensure an adequate level of protection for its clients' confidential information. This concerns a database containing names, email addresses, and phone numbers, which, according to the information available to me, was compromised. At that time, attackers managed to gain access to the contact details of a significant portion of the user base, triggering a wave of phishing attacks and fraud attempts targeting cryptocurrency asset holders.
It is important to emphasize that the incident itself did not directly affect funds on the hardware devices — private keys remained secure. However, the leak of personal data created serious reputational risks and undermined trust in a company that positions itself as a benchmark of security in the industry.
The plaintiffs allege that the company showed negligence by failing to take timely measures to prevent the leak and also did not notify affected users promptly and in full. The lawsuit will likely raise the issue of compensation for moral damages and losses incurred by clients as a result of fraudulent actions carried out using their data.
For Ledger, this is not the first such case, which makes the situation particularly sensitive. Previously, the company had already faced criticism for insufficient transparency on security matters. Now, legal risks could translate into significant financial losses, not to mention long-term damage to the brand.
My view on the situation
This lawsuit is another reminder that even the most "secure" ecosystems are vulnerable at the level of peripheral infrastructure. For the industry as a whole, this is a signal: security is not limited to device cryptography but encompasses all points of data collection. Regardless of the outcome of the proceedings, Ledger will have to invest in restoring trust, otherwise users will begin to seek alternatives among competitors who pay no less attention to privacy than to key protection.