Yeah, but that Ledger shouldn't even keep that data with a 3rd party. They should keep their customer data (if required by law) OFFLINE. Also it looks like they grossly ignored GDPR laws of deleting customer data on request and after 6 months. The EU regulator will have a field day in this shit company for sure
