Ledger Tells Asia-Pacific Resellers to Pull Hardware Wallets Amid Supply-Chain Tampering Probe

What happened

According to BleepingComputer, Ledger has asked resellers and distributors across Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend sales of its hardware wallets and pull them from shelves while it investigates reports of device tampering. Ledger's exact findings and scope have not been fully disclosed, and this is still an active investigation rather than a confirmed, fully-scoped incident.

Why it matters

Ledger hardware wallets are used to store private keys for cryptocurrency and are widely sold through third-party retail and online resellers, which is exactly the kind of channel where supply-chain tampering (device substitution, seed-phrase skimming, or implant insertion before a device reaches the end user) is hardest for a vendor to police directly. If devices purchased through affected resellers were tampered with, the practical risk is theft of funds via compromised seed generation, swapped packaging, or implanted hardware/firmware — a scenario that affects any individual or organization that purchased a Ledger device through resale channels in the named countries recently.

What defenders and buyers should do now

• Anyone who purchased a Ledger device from a reseller (rather than directly from Ledger) in the affected region should treat the device as untrusted pending Ledger's guidance — avoid initializing a wallet or entering/generating a seed phrase on it.
• Check for tamper-evidence: packaging seals, holographic stickers, box condition, and compare against Ledger's official unboxing/authenticity guidance.
• Organizations with employees or treasury operations using Ledger devices should inventory where devices were sourced and flag any purchased through the listed APAC markets for review.
• Watch Ledger's official channels and support site for an official statement, affected serial/batch ranges, or remediation steps, and monitor for any funds-draining activity tied to newly initialized wallets.
• From a detection-engineering angle, this is a reminder to extend supply-chain risk monitoring to hardware procurement, not just software dependencies — track vendor advisories for hardware wallet and HSM-adjacent products as a threat-intel feed.

Developing story

This is a net-new, developing report with no CVE or detailed technical disclosure yet; details on the tampering method, scope, and affected serial numbers are expected to evolve. For the latest, see the original report at BleepingComputer.