This exploit is currently being investigated, Ledger has filed complaints and will help affected individuals try to recover funds.