Ledger, the maker of hardware wallets for storing and storing bitcoin and other digital currencies, today revealed that its marketing database was hacked last month, resulting in a million emails and some personal documents being leaked.

Users’ funds were not affected by the hacking of users’ data.

Where clarified Ledger said in a statement that the attack only targeted the marketing and e-commerce database, meaning the hackers were unable to access the users’ recovery phrases or private keys.

Likewise, not all financial information such as payment information, passwords and funds were affected.

The company added that the breach was not related to the “Ledger” hardware wallets or the “Ledger Live” security product.

Read:Venezuela announces the launch date of the digital bolivar … know it!

Quoted from the statement:

Only contact and order details are included.

It is mostly the email address of about 1 million of our customers.

In addition to the investigation, we were also able to establish that a subset of the data was viewed from:

First and last name, postal address and phone number.

A researcher involved in the Ledger bug bounty program initially reported the issue on July 14.

The company patched the issue at the time, but later discovered that the breach had occurred exactly weeks earlier on June 25.

The hack was caused by a third-party tool that entered Ledger’s marketing database using an API key that has now been disabled.

In a note to customers, Ledger CEO Pascal Gauthier said the company is deeply sorry about the incident and warns users to be wary of phishing attempts.

As Pascal commented on this:

We take privacy very seriously, we discovered this vulnerability thanks to our bug bounty program, and we fixed the issue immediately.

But regardless of everything we have done to avoid the consequences of the hacking process, we sincerely apologize for the inconvenience this may cause you.

Read:Tether reveals its holdings of commercial paper that backs the USDT stablecoin

It told Ledger that the French data protection authority, CNIL, was notified of the breach on July 16.

The company is also working with Orange Cyberdefense to find any evidence of stolen data being sold online.

All users affected by the breach were notified today and the investigation is ongoing.

Read also:

With pictures, a simple explanation of how to set up the Ledger Nano S hardware wallet

How to receive ERC20 cryptocurrency in Ledger Nano S wallet using MyEtherWallet