Ledger takes steps to protect your data but cannot guarantee it will never be breached — and in fact suffered a major data breach in 2020 affecting over 270,000 customers.
Ledger cannot guarantee the security of your personal data, and their 2020 breach — which exposed the names, phone numbers, and home addresses of over 270,000 customers — demonstrates this risk is material, particularly given that this data is linked to cryptocurrency ownership.
Cross-platform context
See how other platforms handle Security Measures and Breach History Context and similar clauses.
Compare across platforms →This standard disclaimer is particularly significant for Ledger given their documented 2020 breach, which exposed the physical home addresses of over 270,000 customers who were then targeted by phishing campaigns and physical threats — the risk of data exposure here is not theoretical.
REGULATORY FRAMEWORK: Data security obligations are governed by GDPR Art. 32 (appropriate technical and organisational security measures), with breach notification under Art. 33 (to CNIL within 72 hours) and Art. 34 (to affected individuals without undue delay for high-risk breaches). In the US, FTC Act Section 5 requires reasonable security; state breach notification laws (e.g., California Civil Code §1798.29, NY SHIELD Act, Texas Business & Commerce Code §521) require prompt consumer notification.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.