Ledger's security team Donjon is examining recovered devices and cooperating with law enforcement. According to Pascal Gauthier's monitoring, all confirmed fund losses in the incident involved Ledger signing devices sold through Southeast Asian reseller CryptoBilis. Ledger confirmed on October 10 that one affected device contained an unauthorized hardware implant. There is currently no indication that Ledger's own infrastructure, systems, or services were compromised. CryptoBilis has stopped selling Ledger devices.