Ledger, the popular cryptocurrency hardware wallet provider, suffered a major security breach earlier this week on its Discord server. For the second time in as many months, a hacker bot tried to steal users’ seed phrases, though the company insists that the matter was promptly shut down. This incident follows other high-profile security failures. These users have both met counterfeit Ledger devices and been the target of phishing attacks via regular mail.

The Ledger team member, Quintin Boatwright, addressed the breach on the company's Discord server, which Ledger uses to share protocol developments and engage with its community. Boatwright assured that the security breach, which gained widespread attention, was an anomaly.

"The issue was quickly contained: the compromised account was removed, the bot was deleted, the website was reported, and all relevant permissions were reviewed and secured." - Ledger team member

As of this writing it is still unknown whether any of their users fell victim to the attempted hack. Ledger subsequently implemented further safeguards in its security procedures on Discord to help avoid similar situations.

This incident is not the first security debacle Ledger has encountered. Back in April, threat actors started sending real, tangible letters in the mail to Ledger hardware wallet users, asking them to verify their private seed phrases. The goal was always to get inside the henhouse and pluck the money. A past data breach leaked the personal data of more than 270,000 Ledger users. This leak divulged names, phone numbers, and home addresses.

This time, a fraudulent Ledger Live application made it onto the Microsoft App Store, which is a huge security red flag. Through this scam, victims lost an estimated $500,000.