Compromised Ledger devices were distributed through third-party resellers in the West Pacific region, including Crypto Billis and Yahoo Auctions Japan