The French company Ledger has obtained the audit test named SOC 2 type 1.
This audit test echoes the theft of its customer database at the end of July 2020.
The Trust Project is an international consortium of news organizations based on transparency standards.
The French company Ledger has obtained the security audit test named SOC 2 type 1. This audit test echoes the theft of its customer database at the end of July 2020.
Ledger gets an audit test
The French manufacturer of cryptocurrency storage equipment has obtained an audit test called “System and Organization Controls (SOC). Ledger’s handy audit was to ensure that customer information was handled properly by the company.
The firm Friedman LLP based in New York, conducted the type 1 SOC 2 test on Ledger.
The SOC 2 Type 1 exam is used to analyze a company’s security through an audit and to verify the proper management of customer information. SOC 2 type 1 certification shows that a company has implemented best practices.
Charles Guillemet, CTO of Ledger, said:
By obtaining SOC 2 Type 1, we are now able to provide an additional layer of security for our customers.
By passing this audit, Ledger shows that these processes and its systems are rational, documented and globally secure.
The Gemini exchange created by the twin brothers Winklevoss was awarded a higher level of audit in January 2020 known as SOC 2 type 2.
Echoes of theft from its customer database
At the end of July 2020, Ledger had been stolen from a database containing 1 million emails from customers and prospects. This database was used to send order confirmations and promotional emails.
A subset of this database also contained the names, first names, addresses and telephone numbers of more than 9,000 customers .
The French manufacturer alerted the French authorities and filed a complaint with the Paris prosecutor’s office. Ledger said he did not find any information about his customers and did not receive any ransom requests.
Passing this audit test was essential for a company that specializes in security.