logoalt Hacker News

woadwarrior01 • yesterday at 12:27 PM • 3 replies • view on HN

Ledger has had three data leak incidents: once in 2020, a software supply chain attack in 2023 and another data leak in 2026. This latest one is the fourth.

Even if one were to ignore the latest incident, which arguably isn't their fault, the first three incidents make up a pretty bad security track record.

How a French (EU based) company is still in business after all of this, is an indicator of selective enforcement of EU privacy laws (GDPR, etc).


Replies

Slartie • today at 12:07 PM

> the latest incident, which arguably isn't their fault

I'd not release them soo easily from their share of responsibility. Tamper-proof hardware is a thing, electronic funds transfer terminals for example already implement ways to detect or prevent physical intrusion into safety-relevant parts of the device. Would probably have cost a few cents in manufacturing to add countermeasures to physical modification into the Ledgers. The fact that there is not even the slightest attempt at securing the device against this kind of attacks is entirely on the manufacturer.

> How a French (EU based) company is still in business after all of this, is an indicator of selective enforcement of EU privacy laws (GDPR, etc).

Surely you can name a dozen of US companies that have been driven out of business by enforcement of EU privacy laws. But I'd be glad if you'd at least name a single one!