Spain: Suspect Arrested in 2025 Ledger Co-Founder Kidnapping — Over a Year Later, Justice Moves Forward
March 23, 2026 — More than a year after the spectacular kidnapping of David Balland, co-founder of French crypto hardware giant Ledger, Spanish authorities have finally apprehended one of the last fugitives sought by France. Here’s a look back at an affair that shook the crypto industry and exposed the vulnerability of its key figures to organized crime.
The Kidnapping That Shook the Crypto World
On January 21, 2025, David Balland, co-founder and key figure at Ledger — the company specializing in hardware cryptocurrency wallets — was snatched from his home in central France by a group of armed individuals. Held captive for nearly 36 hours, he was subjected to severe physical abuse. The kidnappers demanded a ransom of 10 million euros (approximately $11.5 million), directly tied to the victim’s professional activity in the cryptocurrency ecosystem.
The intervention by French law enforcement, carried out on the night of January 22, 2025, led to Balland’s release during a coordinated assault. Several members of the group were arrested at the time. But one key suspect — the one at the center of today’s news — managed to flee the country.
Related: Crypto Exchange CEO’s Daughter and Grandson Targeted in Attempted Kidnapping in Paris
Benalmádena: The End of a Months-Long Fugitive Hunt
It was in the seaside resort of Benalmádena, tucked away on Spain’s southern coast in the province of Málaga, that the suspect was tracked down and arrested by Spain’s Guardia Civil. The arrest was carried out under a European arrest warrant issued by France, as part of the judicial cooperation between the two countries.
According to the official Guardia Civil statement, the suspect was first spotted in the province of Valencia, where he was living with his partner and a friend. The group operated with maximum caution: apartments rented through online platforms, payments made with bank cards in someone else’s name, and a minimal digital footprint. A survival strategy, in short, but insufficient against the cooperation between French and Spanish intelligence.
After passing through Seville and Cádiz, the suspect was tracked to Benalmádena, where the arrest required a large-scale police operation due to the danger posed by the individual and the risk that a criminal organization might attempt to free him.
An Affair That Fits Within a Wave of Targeted Attacks on the Crypto Ecosystem
David Balland’s kidnapping is not an isolated case. It is part of a broad series of kidnappings and violent assaults targeting figures in the French crypto ecosystem throughout 2025.
In June 2025, the Paris prosecutor’s office announced the indictment of 25 suspects as part of an investigation into a full-blown kidnapping campaign targeting French crypto investors and executives. A large-scale operation that had dismantled part of the criminal network operating in France.
During the same period, another French cryptocurrency user was held captive for several hours at his home, with attackers demanding cash and access to a hardware wallet containing an undisclosed amount of funds.
Earlier in the year, it was the turn of Pierre Noizat, CEO of Paymium (one of France’s oldest cryptocurrency exchange platforms, operating under the Bitcoin.co brand), to see his family directly targeted: his daughter and grandson were caught up in a failed kidnapping attempt, with the victims managing to flee after a fierce resistance.
This multiplication of attacks prompted security experts to sound the alarm: « wrench attacks » (physical assaults targeting cryptocurrency holders to steal their funds) are on the rise and are becoming « more violent, » several industry specialists warned.
Related: Wrench Attacks on Crypto Holders Are Rising and Growing ‘More Violent’
Ledger: A French Crypto Giant Under the Spotlight
Founded in 2014 by David Balland, Éric Larchevêque, and Joel Poblock, Ledger established itself as one of the world’s leading manufacturers of hardware cryptocurrency wallets. These devices — the Nano S and later the Nano X being the most widely used — allow users to store their private keys offline, safe from hacking attempts.
With millions of devices sold worldwide, Ledger is the go-to reference for security-conscious cryptocurrency investors. The Paris-based company employs several hundred people and has raised considerable funds from top-tier investors.
The kidnapping of its co-founder sent shockwaves throughout the crypto industry, brutally reminding everyone that the physical security of the sector’s key players was just as crucial as the technical security of their products. For Ledger, the affair was a painful wake-up call: the fame and wealth associated with the crypto ecosystem have now drawn the attention of the most organized criminal networks.
The Judicial Response: A Model of European Cooperation
The arrest of the suspect in Spain highlights the growing power of European judicial cooperation in the fight against cryptocurrency-related crime. The European Arrest Warrant (EAW), a tool that allows the judicial authorities of an EU member state to request the arrest and extradition of a person sought by another member state, has once again proven effective.
The suspect is expected to be extradited to France in the coming weeks to stand trial. He faces charges of aggravated kidnapping, unlawful imprisonment, and torture in connection with the Balland case.
This case also demonstrates that European borders no longer constitute a reliable refuge for criminals with links to the crypto ecosystem. The collaboration between Spain’s Guardia Civil, French judicial police, and Eurojust — the European Union Agency for Criminal Justice Cooperation — now enables increasingly precise cross-border pursuit operations.
Security Implications for the Crypto Ecosystem
Beyond the judicial aspect, this case raises fundamental questions about the future of the crypto ecosystem:
Physical Protection of Industry Figures
The founders and executives of crypto companies often hold significant fortunes in cryptocurrency, making them prime targets. The personal security of these individuals — bodyguards, fortified homes, travel protocols — has become an absolute priority. Specialized firms now offer « crypto security » services that combine physical protection with traditional cybersecurity.
Anonymity as a False Friend
While cryptocurrencies are often promoted as a means of preserving financial privacy, the Ledger affair is a reminder that this confidentiality can work against users. Bitcoin and other cryptocurrency transactions are traceable on the blockchain — a paradox meaning that although the kidnappers demanded crypto funds, those very funds could be tracked by investigators, contributing to the dismantling of the network.
Platform Accountability
Platforms like Ledger find themselves in a delicate position: their commercial success rests precisely on their users’ trust in the security of their products. An incident as serious as a co-founder’s kidnapping can dent that trust. Ledger managed to weather the storm, but the affair has undeniably changed the way the industry approaches security in its entirety — both physical and digital.
Conclusion: The End Is Not Yet Written
The arrest of this suspect in Spain marks a major breakthrough in the resolution of one of the most publicized criminal cases linked to the cryptocurrency sector. But it does not constitute the final chapter.
Other suspects are likely still at large, and the investigation continues to shed light on the full extent of the network responsible for this wave of kidnappings. Moreover, the trial of those already arrested in France and Spain promises to be complex, with unprecedented legal implications regarding accountability for crimes involving digital assets.
For the crypto industry as a whole, this affair will remain a both brutal and necessary reminder: as cryptocurrencies become a major financial asset, security — in all its forms — can never be taken for granted. Private keys are safe in a Ledger wallet. Their owners, now, know that their physical safety requires just as much attention.
Sources: Cointelegraph, Guardia Civil, French judicial investigations.
Tags: Ledger, David Balland, crypto kidnapping, Spain, France, Guardia Civil, crypto crime, hardware wallet, cryptocurrency, physical security
