Update to incident: Ledger: a hardware implant that reads the seed from the screen found in signing devices from reseller CryptoBilis; thefts of funds confirmed
Ledger and MediaMarkt Saturn suspend Ledger signer sales in Germany after a report of an implant in a device
Ledger reports that, as of October 13, MediaMarkt Saturn has stopped selling Ledger signers in stores and online in agreement with the vendor — prompted by a report from one customer in Germany who found an implant inside a device. No loss of funds has been reported, and there are no signs of compromise of the vendor's infrastructure or services. Ledger support is handling user reports, and the Donjon laboratory will examine the devices it receives. The risk concerns those who bought a device from this retail chain: hardware tampering means potential access to the secret stored on the device.
If you bought a signer from this chain and have not yet set it up, do not set it up, and contact the vendor's support right now using only official channels (linked in the post). If the device has already been set up and a seed was generated or entered on it, consider the secret at risk: immediately create a new seed on a device known to be trusted, and transfer funds to new addresses. Do not share the 24 words with anyone over a call, in messages or on a website: the vendor does not ask for them. Do not treat numbers and details in third-party posts as facts — wait for updates from official channels.
Source: x.com - Ledger
Incident history
- 13 OctLedger: a hardware implant that reads the seed from the screen found in signing devices from reseller CryptoBilis; thefts of funds confirmed
- 13 OctLedger and MediaMarkt Saturn suspend Ledger signer sales in Germany after a report of an implant in a device