Ledger Discloses Supply-Chain Attack Countermeasures, Announces Atom Device
Ledger outlines measures against a supply-chain attack on its hardware wallets and unveils a new mobile device, Ledger Atom, with shipping expected in 2027.
Ledger disclosed its countermeasures against a supply-chain attack on its hardware wallets and announced a new mobile device called Ledger Atom. The company said shipping for the new device is expected to begin in 2027. The announcement was reported by the blockchain media outlet CoinPost.
According to Ledger, the attack was a supply-chain attack carried out by an organized crime group. Attackers bought genuine Ledger devices, opened them, and inserted illegal components designed to steal recovery phrases. The tampered devices were distributed through sales distributor networks in Southeast Asia.
Ledger stated that its chips, operating system and servers had no flaws and that its systems were not compromised. The company said it is working with law enforcement to trace stolen funds and dismantle the attackers' infrastructure, and will share technical information where possible to help other companies strengthen security.
Ledger sent investigation teams to several regions including Germany to buy and inspect products in stores, and found no irregularities within the inspected scope. It asked its official distributors in Southeast Asia and Hong Kong to temporarily suspend sales, and reiterated that returned devices at official stores and distributors cannot be resold, even if they appear new or unopened. The company also instructed that products not be displayed on store shelves, that stock be kept in the back yard, and that customers report any product abnormalities immediately.
In background, Ledger stated on October 15 that the attack was a sophisticated crime prepared over several months. Attackers built separate infrastructure for collecting recovery phrases, stealing assets and laundering funds, and Ledger said they spent millions of dollars to systematically take user assets. Bitquery estimated that about 93.2 million dollars had been drained as of the 11th. Ledger said the figures circulating online were presented by third parties and had not been sufficiently verified.
Quick answers
What is Ledger Atom?
Ledger Atom is a new mobile device announced by Ledger, designed with a focus on security. Shipping is expected to begin in 2027.
What did Ledger say about the supply-chain attack?
Ledger said the attack was a supply-chain attack by an organized crime group. Attackers bought genuine devices, opened them, and inserted illegal components to steal recovery phrases. The tampered devices were distributed through sales distributor networks in Southeast Asia.
Were Ledger's systems compromised?
Ledger stated its chips, operating system and servers had no flaws and that its systems were not compromised.