October 13th 2026, 3:53 PM
Ledger Reviewing Device Sales Policies After $90 Million Spyware Theft
Key Summary
Ledger is reviewing its device sales policies after a supply-chain attack caused $90 million in losses, with 315 wallets across six chains affected. The attack involved unauthorized hardware implants that read recovery phrases from Ledger devices sold through an authorized reseller, CryptoBilis. Ledger says no devices sold through its direct sales channels were compromised.
Please see our real time news feed on our Home Page
Incident Overview
Ledger is taking a hard look at how its hardware wallets reach customers after a supply-chain attack caused $90 million in losses.How the Attack Worked
The compromised devices were sold through CryptoBilis, an authorized Ledger reseller. The incident first surfaced around October 9, 2026.Affected Devices and Markets
Most affected units went to buyers in Southeast Asia, with Malaysia, Indonesia, and the Philippines being the main markets hit.Damage and Response
The damage, by the numbers Loss estimates range from $72 million to over $93 million. Bloomberg put the figure at $90 million. The thefts hit 315 wallets across six chains.Ledger's Response
Ledger told recent buyers not to initialize unused devices. It also advised them not to migrate funds onto new hardware while the situation is assessed.Reseller and Similar Cases
CryptoBilis changed hands in March 2026. The unauthorized implants were reportedly introduced after the new owner took over. Reports of similar implants have emerged from Europe, including devices sold at MediaMarkt, the electronics retailer.#Ledger#US#Crypto#SEC