Ledger has confirmed that a highly organized criminal group spent millions of dollars purchasing genuine devices, tampering with them to embed custom hardware components designed to steal seed phrases during initialization. The compromised units were redistributed through Southeast Asian dealers after the attackers established dedicated infrastructure for data collection and money laundering. Ledger stated its core chips, operating system, and servers remain uncompromised, as the attack occurred entirely within the post-manufacturing distribution chain. In response, Ledger has ordered authorized resellers in Southeast Asia and Hong Kong to suspend sales immediately. New protocols require products to be delivered directly from inventory rather than displayed on shelves, and returned devices are now permanently barred from resale. Inspections of German market units and warehouse stock have so far revealed no anomalies. Ledger is currently collaborating with law enforcement and SEAL 911 to trace illicit funds and will release a full technical disclosure in due course.