Still waiting on more details but it appears that an authorized Ledger reseller named CryptoBilis that serves the Philippines, Malaysia, and Indonesia has recently been serving up compromised devices. Unclear if they were sending genuinely tampered-with devices or just inserting premade seed phrases into the box. We'll have to wait for victim testimonies to learn more. For now be sure to always generate your own seed phrase. If a seed phrase is included in the device you've purchased or the device is already initialized and you're given a PIN to enter, alert the manufacturer and return the device. Ledger also allows you to run a genuine check, which provides cryptographic proof that the device has not been tampered with. If you've bought from CryptoBilis (or to be safe, any third party retailer) in the past 90 days, firstly you should move your funds. Secondly, I'd love to hear from you. Everybody else has nothing to worry about.