Third-party security firms estimate losses approaching $90 million from a wallet drain incident involving Ledger devices sold through authorized distributor CryptoBilis. Ledger is investigating the incident, which occurred on October 9, 2026, and represents the largest security breach involving Ledger. Ledger requested that the Southeast Asian distributor suspend sales and shipments. Ledger advised users who purchased devices through this channel within the past 90 days to exercise caution or transfer assets. The cause remains undetermined, with a supply chain attack or device tampering suspected.