Ledger has confirmed a supply chain attack after discovering that at least one user device contained an unauthorized hardware implant. The company is investigating the incident and has not yet disclosed the full scope or potential impact on affected users.