INVESTIGATORS have uncovered a supply‑chain compromise affecting Ledger hardware wallets sold in Europe, following earlier findings in Malaysia. A distributor for Ledger allegedly tampered with devices at the point of distribution, embedding an extra circuit board and a concealed LTE module to exfiltrate recovery seed phrases from users. The breach has been linked to substantial losses in digital assets, reported at at least $92 million, with Ledger reportedly offering no financial restitution to those affected.
In Europe, a wallet purchased from a MediaMarkt outlet was dismantled by a concerned buyer who found the clandestine hardware modification. The same individual had previously acquired another device from a different retailer and observed a strikingly similar alteration. Retail records indicate the affected inventory originated with Aqipa GmbH, a German distributor serving Europe.
Analysts cited in the piece note uncertainty about exactly where in the supply chain the tampering occurred, with a plausible scenario being that criminals masqueraded as Ledger representatives to inject the compromised devices into downstream distribution. The article emphasises that the tampering is not limited to a single region and warns that careful verification of complete, factory-sealed devices remains crucial for consumers and retailers alike.