The hardware wallet manufacturer notes its devices and backups are untouched, but the leak hands attackers valuable customer data.