The hardware wallet manufacturer says its devices and backups are untouched, but the leak hands attackers valuable customer data.