LEDGER SAYS ITS CHIP WAS NEVER BROKEN — THE IMPLANTS WENT IN AFTER THE DEVICES LEFT ITS HANDS — NO DEVICE COUNT, NO VICTIM COUNT, NO WORD ON REFUNDS

Ledger posted its account of the hardware implant attack on October 15, 2026. It says a criminal group bought genuine Ledger devices over many months, opened them, fitted hidden parts built to capture the recovery phrase during setup, and put them back on sale through resellers in Southeast Asia. Ledger says its chip, operating system and servers had no flaw. In its words, “This was an attack on the distribution channel after the devices left our control.”

The fixes are rules for shops. Returned devices may never be resold, even if they look new and sealed. Ledger products come off shelves and displays, and stock stays in the back until the sale. Authorized reseller sales stay suspended in Southeast Asia and Hong Kong. Crypto.news reports the returned-device rule already existed and is now to be followed without exceptions.

The post gives no count of devices, no count of victims, no loss figure and no word on refunds. The loss number is unsettled. Per Bitcoin.com, Yfarmx puts it at $93.4 million and Bitquery at about $92.9 million, and Crypto.news cites estimates above $86 million. Ledger has confirmed none of them. Later the same day, at its Op3n event in Paris, Ledger opened reservations for Atom, an Android-based signer with an $849 Founder’s Edition, a $100 refundable deposit and shipping estimated for 2027, sold only through Ledger.

The secure chip was never the weak point here. The weak point was a box someone else had opened before the buyer did, and a buyer cannot check a sealed box by looking at it. That is why Ledger now keeps stock out of reach. Trust becomes checkable when the vendor publishes what it found: how many units, where, and who was paid back. Ledger has promised a fuller technical disclosure. At the time of this writing, bitcoin was $82,254.