The security threat follows a confirmed breach involving Southeast Asian reseller CryptoBilis, where implants allegedly stole recovery phrases, draining $86M to $93M from over 300 wallets on Oct 9. In the recent European case, Ledger stated no loss of funds occurred, but researchers noted that the firm's Genuine Check tool cannot detect added hardware. The tampered units at MediaMarkt were traced to distributor Aqipa GmbH, which supplies over 1,000 stores across 11 countries.
