Is Ledger safe in 2026?

What happened

In October 2026, Ledger said criminals fitted cellular implants into genuine devices and put them back into distribution through resellers in Southeast Asia, capturing recovery words during setup. Galaxy Research found the devices were sold through CryptoBilis, which Ledger's own site listed as an authorized reseller for Indonesia, Malaysia and the Philippines (Galaxy Research). Ledger says its secure element, operating system and servers were not compromised (Ledger; BleepingComputer).

On October 15, 2026, Ledger asked sellers across Asia to halt sales during its investigation (BleepingComputer). On October 13, MediaMarkt pulled Ledger devices in Germany as a precaution (Cointelegraph).

Are you affected?

• Bought from ledger.com and set up with a new seed it generated: no action is indicated by current reports. Update only through the official Ledger Wallet app.
• Restored an existing seed onto a device you didn't buy direct: treat that seed as exposed too. Galaxy Research found victim addresses dating to 2021, consistent with existing seeds being restored onto tampered devices (Galaxy Research).
• Arrived already set up or with a printed seed: treat it as compromised (Galaxy Research).
• Bought from a marketplace or unlisted reseller, especially in Southeast Asia: treat the seed as exposed. Buy a new device directly, create a new seed on it, and move your funds.
• Not sure where it came from: treat it as exposed. Moving coins to a fresh seed costs a fee; losing them costs everything.

Never type your 24 words into a website, app or form to "check" whether you are affected. Any site or message asking for them is a scam.

Our verdict

Caution: we don't recommend Ledger for bitcoin-only self-custody right now. If you use one anyway, buy only direct from ledger.com, treat any device that arrives already set up or with a printed seed as compromised, never restore an existing seed onto a device you didn't buy direct, and update only through the official Ledger Wallet app. Sources: Ledger (Oct 15, 2026); Galaxy Research (Oct 16, 2026). For bitcoin-only options, see best Bitcoin hardware wallets in 2026.