72 hour update on Ledger incident

As the investigation continues, we are working with relevant authorities. The volume of impacted devices is limited. We know this is concerning, especially for those directly affected, and we are reaching out to impacted users.

To date, all confirmed cases related to the disclosed draining incident of Oct 9th, 2026, involve devices sold through authorized resellers. Our systems and direct sales channels remain unaffected. We take this situation seriously and are actively investigating.

We encourage impacted users to reach out to Ledger Support through official channels and file complaints with their local law enforcement authorities.

We are reminding our authorized resellers and distributors to source products only through authorized channels and never to restock returned products.

Also, we strongly advise users not to purchase from unauthorized resellers, where the risk of buying suspicious, counterfeit or modified devices is important as nothing operates under ledger security guidelines.

Security isn’t static and this incident underscores why we continuously review and strengthen our distribution and anti-tamper processes.

We are continuously improving that work now and events like this strengthen our resolution: reviewing authorized reseller controls, advancing hardware protections, and cooperating with authorities.

This is an ongoing threat that doesn’t just impact Ledger, but the whole ecosystem, and we are calling others in the space to work with us on making improvements for users.

We believe in jointly working with researchers, other vendors and partners on improving industry chain-of-custody practices and anti-tamper techniques. Raising the bar on physical supply-chain integrity benefits the entire ecosystem. If you have relevant information, contact [email protected].

Ledger Support is available 24/7 to answer your questions and concerns.