Sort:  

Good point.

Correct me if I'm wrong though, but from what I'm reading, it seems like it was a third party storing the data that got hacked, not Ledger themselves.

Posted using Dapplr

Yeah, but that Ledger shouldn't even keep that data with a 3rd party. They should keep their customer data (if required by law) OFFLINE. Also it looks like they grossly ignored GDPR laws of deleting customer data on request and after 6 months. The EU regulator will have a field day in this shit company for sure