Ledger is now facing a class action lawsuit related to an alleged data breach that occurred in 2023.
ICYMI: Ledger got hit with a class action today over a 2023 data breach it allegedly downplayed… AFTER leaking roughly 270,000 customers’ private info in 2020.
Plaintiff says a December 2023 security incident exposed customer names, emails, phone numbers, and other PII. Ledger… pic.twitter.com/HGLje1t6rZ
— Ariel Givner (@GivnerAriel) September 3, 2026
The case has been filed in the Southern District of New York, with Douglas Kim as the plaintiff.
The complaint alleges that the December 2023 incident compromised customer names, email addresses, phone numbers, and other personal information. Kim contends that Ledger failed to fully disclose the breach in a timely manner.
The lawsuit connects the alleged data breach to social engineering attacks, where criminals impersonated Ledger representatives to convince users to authorize fraudulent transactions and steal cryptocurrency assets.
Additionally, the lawsuit references a 2020 breach that reportedly affected around 270,000 customers.
Ledger is accused of violating consumer protection laws, negligence, misrepresentation, and engaging in unfair business practices.
It is worth noting that in August, the OneKey Anzen team successfully replicated a transaction substitution attack in the Ethereum application of Ledger wallet version 1.22.1 in a test environment.