MediaMarkt Saturn Suspends Ledger Hardware Wallet Sales Following Tampering Incident

This incident raises significant concerns about the security of cryptocurrency hardware wallets, impacting consumer trust and market dynamics.

• On October 13, 2026, Ledger revealed unauthorized hardware implants in devices sold through Southeast Asian reseller Cryptobilis.
• MediaMarkt Saturn suspended all Ledger sales in response to a report of tampering, despite no confirmed fund losses in that case.
• Estimated losses from compromised wallets have reached $93 million, with ongoing investigations into the supply chain security.

• Reports of cryptocurrency drains from Ledger devices first emerged on October 9, 2026, linked to wallets purchased via Cryptobilis.
• Ledger's Donjon security team discovered implants that could capture recovery phrases during device setup without altering the secure element or operating system.
• Competitor Trezor has tightened its reseller network in light of the incident, indicating a broader industry response to supply chain vulnerabilities.

The Ledger hardware wallet incident underscores a critical vulnerability in the supply chain of cryptocurrency security devices. On October 13, 2026, Ledger disclosed that certain devices sold through the Southeast Asian reseller Cryptobilis had been tampered with, allowing unauthorized access to sensitive recovery phrases. This tampering involved the installation of a microcontroller and eSIM that transmitted these phrases over LTE, effectively compromising the security of the wallets.

The immediate fallout was significant. MediaMarkt Saturn, a major European retailer, suspended all sales of Ledger products following a report from a German customer who suspected tampering. While no funds were confirmed lost in this case, the precautionary measure reflects the heightened sensitivity around hardware security in the cryptocurrency space. The incident has led to an estimated loss of $93 million, with the cumulative on-chain theft from affected wallets reaching $102 million across various public chains.

The implications extend beyond Ledger and MediaMarkt. Other competitors, such as Trezor, have begun reviewing their reseller partnerships to mitigate similar risks. This incident highlights the importance of robust supply chain verification processes, as the hardware wallet market faces increasing scrutiny from consumers and retailers alike. Ledger has urged users to inspect their devices and has emphasized that confirmed incidents are limited to Cryptobilis-sourced units, yet the damage to consumer trust is already evident.

As investigations continue, the cryptocurrency hardware wallet market is likely to see a shift towards enhanced security measures and more stringent reseller vetting processes. This incident serves as a wake-up call for both manufacturers and consumers about the potential vulnerabilities in hardware security, particularly as the market grows and attracts more users.

• Cryptocurrency investors: Those using Ledger wallets may feel immediate anxiety about the security of their assets.
• Retailers: MediaMarkt Saturn and other retailers may face sales declines and reputational damage.
• Competitors: Companies like Trezor may need to adjust their strategies to reassure customers about their security measures.

• Investigative outcomes: Watch for results from ongoing investigations into the tampering incident, which could lead to regulatory changes.
• Market response: Monitor how other hardware wallet manufacturers adjust their security protocols and reseller partnerships in response to this incident.
• Consumer behavior: Observe shifts in consumer trust and purchasing patterns in the cryptocurrency hardware market.