Ledger Hardware Wallet Supply Chain Security Breach
A SIM implant with LTE/eSIM capability was discovered inside a Ledger Flex device purchased at a vendor event in Kuala Lumpur, raising serious hardware supply chain security concerns.
What we know
An account on X documented an nRF9151 LTE module and eSIM embedded in the device purchased from another account on X at a May 22, 2026 event. No funds were lost as the wallet was never used, but the incident raises alarm for anyone who bought Ledger devices from third-party vendors — particularly in Southeast Asia. Investigation ongoing into whether victims who bought from Lazada merchants also had compromised devices.
How the story developed
A SIM implant with LTE/eSIM capability was discovered inside a Ledger Flex device purchased at a vendor event in Kuala Lumpur, raising serious hardware supply chain security concerns.
Keystone revealed hackers stole customer data and a WebAuth device-authentication key used to verify hardware wallets, potentially enabling counterfeit devices. 18,835 devices were destroyed and 25,964 purchase records were exposed.
Keystone confirmed a third party accessed its website on October 20 and obtained customer shipping and order data.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.