Ledger announced the Atom on Oct. 15 as a security and privacy device that runs everyday apps, and opened reservations for a Founders Edition the same day. Reserving now means paying a deposit for a device that has not shipped, in the same week Ledger disclosed a reseller supply-chain attack.

What the Atom is

Ledger's product page says the Atom is not a smartphone but a data-only mobile device, with no cellular voice calls or SMS, running a hardened Android Open Source Project build beside an isolated Ledger OS. The Verge quotes Ledger saying it is "not designed to replace your phone."

Ledger's product page lists a Common Criteria EAL6+ certified Secure Element running Ledger OS, plus a physical switch that cuts the camera and microphone. Ledger's launch post says only the intended recipient, on another Atom, can read a secure message.

Reservation terms

Ledger's launch post says you can reserve a Founders Edition with a fully refundable $100 deposit at a reserve price of $849, and that the Atom ships in 2027. Ledger's reservation notice calls the delivery estimate summer 2027, says it is not a commitment, and says Ledger will email if it changes.

The same notice says you can cancel for a full refund until 14 days after you receive the device. It says the balance is paid when you complete the purchase, may be converted from a euro price, and that US delivery depends on FCC equipment authorization.

The Verge reports the price rises to $899 after launch. As of Oct. 15, Ledger's launch post and reservation notice show no post-launch price.

The reseller incident

Ledger's Oct. 15 post says a criminal group bought genuine devices, opened them, fitted hidden components designed to capture the recovery phrase during setup, and returned them to distribution through resellers in Southeast Asia. It says Ledger's chip, operating system and servers had no flaw and were not compromised.

Ledger's X post says Ledger confirmed on Oct. 10 that signers sold by CryptoBilis, a reseller in Southeast Asia, contained an unauthorized hardware implant, for one affected user's signer. Ledger's Oct. 13 update asked resellers and distributors in Southeast Asia and Hong Kong to suspend sales.

Ledger's Oct. 15 post says every device it spot-bought and opened in stores, including in Germany, was clean. It says Ledger is requiring its Authorized Resellers and Distributors to keep Ledger products off shelves and displays and to hand stock over at the time of purchase.

The Verge adds that the implant read 24-word recovery phrases and sent them out over an eSIM, that sales also paused at MediaMarkt, and that reports of over $86 million in theft are unconfirmed by Ledger.

Anti-tamper measures

The Verge lists three Atom measures it attributes to Ledger: an enclosure around the Secure Element, MCU and FPGA built to detect drilling or opening, detection of display or back-cover removal with a paired back cover, and packaging designed to show whether it was opened before reaching you.

As of Oct. 15, Ledger's product page, launch post and reservation notice do not list these measures. The Verge reports them, along with Ledger's claim that they would have blocked the implants in the recent incident.

Why it matters

Our assessment: we have not handled an Atom. Ledger's own notice calls this a reservation for a product still in development, and the refundable deposit is the safeguard. The reseller case points to buying direct from Ledger. Tamper-evident packaging can show a box was opened; it cannot show what was done to a device before sealing.

What is not known

As of Oct. 15, Ledger's launch post gives an estimated delivery of Q2 2027 in its footnote while its reservation notice says summer 2027. The Verge says Ledger has not confirmed the scale of losses.