On October 13, Ledger said confirmed incidents had occurred only in Southeast Asia.
Karpeles’s database now lists 12 devices with a confirmed implant, and in 8 of them the seller wasn’t CryptoBilis.

The sellers include MediaMarkt in Germany, Ozon, Amazon Japan, and Metapod at Singapore Airport.

To be clear about the difference:
- “Confirmed” is a label Karpeles applies himself, not Ledger.
- Ledger talks about verified data leaks; the database is about boards that have been found. It says nothing about leaks from these 8 devices.

But a board with its own antenna, which on devices taken apart in detail can read the seed phrase off the screen, doesn’t care which country you bought your wallet in.

And MediaMarkt, for its part, took the affected devices off its shelves and website after a single complaint in Germany. An odd move if it’s “Asia only.”

Buy hardware directly from the manufacturer only. I’ll take a closer look at how Ledger responds to this database separately—subscribe so you don’t miss it.

#Ledger #CryptoSecurity #HardwareWallets