Sadly, you're correct. If we consider third-party breaches as direct attacks on the hardware wallet brand or company itself, the list would be long. In a span of just 3 months, Trezor, Ledger, Coldcard, Keystone, Safepal, BitBox, Tangem, and Foundation fell victim to various attacks.
Although these attacks don't necessarily mean user funds are compromised, leaked personal details could actually lead to it, or even worse.
Which leads us to ask, time to change what exactly?
Attacks become massive what needs to be fixed from them? For me there has to be a new way to protect customer privacy data and most of it is stored in those third parties that are becoming vulnerable now... I don't know what to say, but with a complete data leak it's a big loss.
I have no idea what really needs to change, companies now have to think harder to innovate, see other examples because they have been victims, other brands can now be targeted.
