Ledger said all confirmed draining cases involve devices sold through Southeast Asian reseller CryptoBilis and that direct sales are unaffected. The company previously confirmed an unauthorized hardware implant in one affected device, but its role in the losses remains unresolved. CryptoBilis has halted all hardware wallet sales. Ledger urged buyers not to initialize unused devices and to consider moving assets from devices already set up to a new Ledger device with a new recovery seed.
CryptoBilis co-founders Arravind Prabu and Vimalatheethan said they stepped down and completed an operational handover in March 2026 after the company was acquired by new ownership under Nicholas Chang. They said they have had no access to customer data or backend systems since the handover and offered to provide Ledger with historical records to help the investigation.