Trezor has publicly stated it will not leverage the recent security incident involving Ledger for marketing purposes. The company emphasized that it prioritizes user security and continues to collaborate with industry partners on safety measures.
The incident occurred between October 9 and October 11, 2026, involving Ledger hardware wallets tampered with by the Southeast Asian reseller CryptoBilis. Unauthorized implants were found in the affected devices, leading to the theft of an estimated $86 million to $103 million, primarily in USDT on the Tron blockchain.
Ledger confirmed that the compromised devices were limited to those sold through the specific reseller, noting that its internal systems and direct sales channels remain secure. Trezor reported no compromised devices originating from CryptoBilis.
Trezor recently faced its own security challenge in late September 2026, when a data breach at its fulfillment partner, ShipMonk, exposed the personal details of approximately 81,000 customers. The company stated that the integrity of its hardware wallets remained unaffected by this breach.
Both manufacturers advocate for purchasing devices exclusively through official channels. The industry faces potential operational cost increases as companies consider implementing more rigorous anti-tamper standards and supply chain security protocols.
