MediaMarktSaturn has suspended the sale of all Ledger hardware wallets across its network of more than 1,000 stores in 11 countries. The decision, effective October 13, 2026, follows reports of unauthorized hardware modifications in devices.
Investigations revealed that certain units contained malicious implants designed to capture 24-word recovery phrases and transmit them via LTE. Ledger confirmed these unauthorized modifications in specific devices sold by the Southeast Asian reseller CryptoBilis.
The inventory linked to the cases reported at MediaMarkt was traced back to the distributor Aqipa GmbH. While no fund losses have been reported among MediaMarkt customers, the retailer halted sales as a precautionary measure.
Ledger stated that the implants allow for the exfiltration of keys without altering the device's normal operation. Reported losses associated with the compromised CryptoBilis units are estimated between $86 million and $102 million.
