Johannes Urges Ledger Recall After Reporting Spyware in Two Devices

Johannes has alleged that a suspected supply-chain compromise affected Ledger hardware wallets sold through European retailers, after two devices bought at separate MediaMarkt stores allegedly contained spyware.

The second device was opened on video and showed modifications matching the first unit, including an added cable and LTE module. The repeated findings raise the possibility that the issue extends beyond a single device, with potentially affected Ledger inventory distributed to more than 1,000 MediaMarkt and Saturn stores across 11 countries.

Johannes initially suspected that the devices might have been returned products resold as new. MediaMarkt employees told him the purchases were not returned units and that returned Ledger products are sent directly back to the manufacturer.

Store records identified Aqipa GmbH as the inventory supplier. Retailers that obtained Ledger products through the distributor may face the same suspected risk.

Johannes sent both devices to Ledger for analysis and urged the company to begin an immediate product recall. The warning was posted Monday, Oct. 12.