Ledger confirms: Unauthorized hardware was implanted in a user’s device. Of the incidents Ledger has faced over the past few years, this one happened closest to the device in your hands.
This incident (confirmed on 10/10):
· Ledger’s official support account confirmed that an affected user’s device contained an “unauthorized hardware implant”; law enforcement has been contacted
· The device came from reseller CryptoBilis, which has suspended all hardware wallet sales
· Losses: approximately $86 million–$93.4 million, depending on the estimate; Ledger says it has not verified this total
· Ledger says its systems and services were not compromised
Previous incidents:
· 2020: E-commerce database leak exposed over 1 million email addresses and around 270,000–290,000 records containing names, phone numbers, and addresses; no crypto was stolen
· 2021: Fake Ledger devices were mailed to users; connecting one to a computer installed malware
· December 2023: Connect Kit software library was poisoned; the issue was fixed in about 5 hours, with losses of around $480,000 (CoinDesk)
· October 2026: Hardware was implanted in devices sold through a reseller
Where the problems happened: database → fake device sent by mail → software library → device sold by a reseller. With each step, the problem has moved closer to the device in the user’s hands.
Ledger’s advice: Don’t use a device bought from a reseller if it hasn’t been initialized. If you’ve already used it, use a trusted device to generate a new recovery phrase, then transfer your assets. In the future, buy only through official or authorized channels.
Where did you buy your hardware wallet?
#LedgerConfirmsUnauthorizedHardwareImplantedInUserDevice
This incident (confirmed on 10/10):
· Ledger’s official support account confirmed that an affected user’s device contained an “unauthorized hardware implant”; law enforcement has been contacted
· The device came from reseller CryptoBilis, which has suspended all hardware wallet sales
· Losses: approximately $86 million–$93.4 million, depending on the estimate; Ledger says it has not verified this total
· Ledger says its systems and services were not compromised
Previous incidents:
· 2020: E-commerce database leak exposed over 1 million email addresses and around 270,000–290,000 records containing names, phone numbers, and addresses; no crypto was stolen
· 2021: Fake Ledger devices were mailed to users; connecting one to a computer installed malware
· December 2023: Connect Kit software library was poisoned; the issue was fixed in about 5 hours, with losses of around $480,000 (CoinDesk)
· October 2026: Hardware was implanted in devices sold through a reseller
Where the problems happened: database → fake device sent by mail → software library → device sold by a reseller. With each step, the problem has moved closer to the device in the user’s hands.
Ledger’s advice: Don’t use a device bought from a reseller if it hasn’t been initialized. If you’ve already used it, use a trusted device to generate a new recovery phrase, then transfer your assets. In the future, buy only through official or authorized channels.
Where did you buy your hardware wallet?
#LedgerConfirmsUnauthorizedHardwareImplantedInUserDevice
