Public teardown tracker by Mark Karpelès lists 12 Ledgers with a hidden LTE implant, bought everywhere from Lazada Thailand and Amazon Japan to Changi Airport.
"The implant sits inside the enclosure and reads the data shown on the screen … It does not modify the Secure Element or the Ledger operating system," Ledger's Donjon team said. That is why a tampered device still passes Genuine Check.
CryptoBilis buyers in Malaysia, Indonesia and the Philippines lost ~$102M, per Bitquery. Ledger has not confirmed a total, but on October 13 it halted sales in 7 Asian markets.
Bought a Ledger outside ledger.com this year? Move funds to a new device with a new seed.
