Ledger Reported Breach Linked to Southeast Asia Reseller
The company confirmed that hardware wallets sold through a third-party reseller were targeted in a draining incident.
Updated on Oct. 12, 2026 in Cybersecurity
Live Poll
Do you trust the security of hardware cryptocurrency wallets purchased from third-party resellers?
Ledger has confirmed that a security breach resulted in the draining of cryptocurrency wallets linked to devices sold by a Southeast Asian reseller. On-chain researchers estimate that users lost over $93 million during the incident.
Why it matters
This incident highlights the significant security risks associated with purchasing hardware security devices through unauthorized third-party channels. While Ledger confirmed its own internal systems remain secure, the breach underscores the importance of supply chain integrity for high-stakes digital assets.
On-chain researchers identified $93 million in total cryptocurrency losses following the security event. Ledger stated that its own internal systems and direct sales channels were unaffected by the compromise.
The players
Ledger
Ledger is a Paris-based company that specializes in security and infrastructure solutions for cryptocurrencies and blockchain applications.
CryptoBilis
CryptoBilis is a regional reseller based in Southeast Asia that was identified as the source of the affected hardware wallets.
The details
Customers in Southeast Asia reported their wallets were drained following the purchase of devices from the reseller CryptoBilis. Ledger issued a public statement via X within 72 hours of the breach to clarify the scope of the incident.
Timeline
October 9, 2026: The initial wallet draining incident occurred.
October 11, 2026: Ledger issued an official update regarding the breach on X.
The Tech Race
This incident marks a departure from the established security reputation of Ledger hardware wallet supply chain integrity by highlighting vulnerabilities in the retail distribution network. It underscores the broader arms race in the cybersecurity sector where hardware manufacturers must now account for third-party supply chain threats.
Users should verify the legitimacy of any third-party reseller before purchasing hardware security devices. Those who purchased devices through non-official channels should monitor their digital wallets for unauthorized activity.
The takeaway
To ensure maximum security, always purchase hardware wallets directly from the manufacturer's official website rather than third-party resellers. Regularly updating your device firmware and monitoring on-chain transactions are essential steps for protecting your digital assets.
Further reading
For more information on securing your digital assets, visit the Cybersecurity section.
Live Poll
Do you trust the security of hardware cryptocurrency wallets purchased from third-party resellers?
