# Ledger Confirms Hardware Tampering in a Distributor-Sold Wallet

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/30014
Published: 2026-10-12T03:30:31.000Z
Updated: 2026-10-12T03:30:31.000Z
Section: Technology

> The incident involves devices sold through Southeast Asian distributor CryptoBilis, with estimated losses exceeding $93 million across hundreds of wallets.

Ledger has confirmed unauthorized hardware tampering in at least one device sold through Southeast Asian distributor CryptoBilis, exposing users to potential recovery-phrase theft and estimated losses exceeding $93 million.

The affected devices may capture sensitive information when users initialize them or enter a recovery phrase, allowing an attacker to restore the wallet elsewhere. The estimated losses involve hundreds of wallets, but Ledger has not confirmed the final amount or the total number of affected devices.

Ledger said the confirmed cases tied to the Oct. 9 asset theft disclosure involved devices sold through CryptoBilis, which previously served customers in Indonesia, Malaysia and the Philippines. The distributor has suspended hardware-wallet sales while it works with Ledger on the response.

Ledger said there is no indication that its own security infrastructure, systems or services were breached. The company is investigating with law enforcement and reviewing distributor controls and hardware anti-tampering measures.

Customers who bought through CryptoBilis should not initialize unused devices. Those who have completed setup should consider transferring assets to a new Ledger device using a newly generated recovery phrase. Ledger also warned users not to share a 24-word recovery phrase with anyone claiming to offer support.