Ledger’s recent security audit was unconnected to their data breach in June

Grab Bitcoin every hour for life!

It seems the review was already in process before the attack ever occured.

Popular hardware wallet company Ledger recently announced that they had passed a notable security evaluation, known as SOC 2 Type 1. This certification came following a significant data breach the company suffered in June. Ledger did not, however, decide to conduct its security audit because of the breach, according to comments from a Ledger representative. 

“Ledger is always seeking to raise the security standards and has been working on getting the attestation prior to the data breach,” the representative told Cointelegraph. 

News of Ledger’s completed SOC 2 Type 1 audit came in October, essentially giving the market a level of confidence based on a trusted mainstream security benchmark.

“The SOC II attestation refers both to the System, in this case, Ledger Vault only, and the Organization: Ledger as a whole,” the representative explained. “Hence, if the SOC 2 Type 1 only applies to Ledger Vault, the Ledger organization as a whole has been audited (onboarding of collaborators, third party interactions, etc.).”

Ledger was made aware of a database weakness in July, which they quickly patched. The company, however, also uncovered a previous large data breach that occurred in June, which leaked thousands customers’ names, addresses, and other potentially sensitive information. 

Kristy-Leigh Minehan, Former CTO of Core Scientific, told Cointelegraph “SOC2 Type 1 is about assessing the design of a security process (or processes) at a specific point in time (or, as of a specified date).” She clarified:

“They would only be evaluated up until the point when they executed it, not necessarily when they were awarded it.”

Original source: https://cointelegraph.com/news/ledger-s-recent-security-audit-was-unconnected-to-their-data-breach-in-june

Patrick Simpson

I am a affiliate marketer and heavily into crypto currencies. I use traffic exchanges and various safe list and viral mailers to help me build my downlines. I am currently developing my 1st site to come later in 2018(hoping for a Fall launch), I am also lauching my own apparel line of produts this fall(2018). I plan to use the affiliate marketing to learn from and grow my businesses. This blog is my journey and my gift of lessons I have learned for you to learn from.