According to CoinMeta, in its investigation into the crypto theft incident, it was found that at least one piece of hardware had been tampered with by malicious components. In its latest update released on October 10th, Ledger stated that this malicious hardware was located on a device belonging to an affected user and originated from a recent Cryptobilis security incident. Cryptobilis is an authorized distributor in Southeast Asia. This is the first concrete evidence of hardware tampering discovered during the investigation, and what's concerning is that some Ledger wallets may have been secretly tampered with before being delivered to users. Ledger indicated that Cryptobilis has suspended the sale of all hardware wallets as a preventive measure in the investigation and is in contact with affected users to assist law enforcement in tracking down the criminals.