The ColdCard case is very different from this as, that did follow the pathway to seed generation and hacks which is rather uncommon but in this case, its a breach of trust between a particular vendor, the company and customer.
For the fact that, this incident is arising from a particular vendor, its very likely that the ledger wallets have being tampered which is the more reason why, when trying to remain secure in this space, youve got to follow certain rules to the letter. Always ensuring you get to the source for your purchases and downloads.
I just hope we are not caught in between like the victims. There is no research you would have done that will save you from this mess. First, the company is legit, they have been operational for like 5 years now and nothing was suspicious about them. The company was sold and no announcement was made about the change of ownership, now tell me how people are supposed to know there was a change of ownership, this was just March here and alot of damages has been done.
Now that is an alleged, we don't have prove yet they are responsible until investigation is fully done because there are some resellers that are suspect on this case. I don't think an ordinary user would have seen this coming but now that's an experience to use for another day. Most people are going to avoid buying from other people, it's either they go through the company or they don't buy at all.