Ledger Responds to Hardware Implant Attack: Incident Tied to Localized Distribution Channel Attack, Orders Authorized Resellers in Southeast Asia and Hong Kong to Suspend Sales

Crypto hardware wallet manufacturer Ledger has released a statement responding to hardware implant attacks, alleging that criminal groups purchased legitimate Ledger devices, installed hidden components designed to steal users' recovery mnemonics during initialization, and reintroduced the tampered devices to the market via Southeast Asian distributors. Ledger emphasized that its chips, operating system, and servers were not compromised, and characterized the incident as a localized attack on distribution channels after devices left the company’s control, rather than a systemic supply chain attack. The company has requested authorized dealers and distributors in Southeast Asia and Hong Kong to suspend sales. Ledger added that it purchased and disassembled devices from stores in Germany and other regions, and inspected its own warehouse and inventory samples, with no tampering detected in any tested devices. It is also tightening channel management: returned devices, even if appearing brand-new and unopened, may not be resold; products must not be placed on shelves or display areas, stored in backrooms, and delivered only at the time of purchase; distributors are required to report abnormal products promptly. Ledger stated that it is working with law enforcement agencies and the security community to trace funds and dismantle attack infrastructure, and will disclose more technical details in the future.