Ledger Breach: $87M Loss Linked to Reseller CryptoBilis

Ledger Identifies Source of $87M Drain

Hardware wallet manufacturer Ledger has identified a compromised reseller, CryptoBilis, as the source of data breaches leading to the recent loss of approximately $87 million in user funds. The company stated that all confirmed cases of the drain stem from information originating with the reseller.

Reseller Operations Suspended

According to Ledger, CryptoBilis has ceased selling Ledger hardware wallets. The company did not disclose the nature of the compromise at CryptoBilis, but indicated it allowed attackers to access customer data. Ledger emphasized that its own systems and direct sales channels were not affected by the incident.

Ongoing Investigation and User Guidance

Ledger continues to investigate the full scope of the breach and is working with authorities. Users who purchased Ledger devices through CryptoBilis are advised to exercise extreme caution and consider migrating their crypto holdings to new, secure wallets. The company has previously provided guidance on identifying potentially compromised accounts and recommended users revoke permissions for any suspicious connected applications.

Impact on Ledger Ecosystem

This incident raises questions about the security of third-party resellers within the crypto ecosystem. While Ledger maintains its core systems were not breached, the reliance on external distributors introduces a potential vulnerability. The $87 million loss represents a significant reputational hit for Ledger, despite the company’s assertion that its direct operations remain secure.

Source: Decrypt