Honestly i shocked also when i heard about it, cause i also thought hardware wallet is the most secure wallet (which still is). But we can't always judge anything for one or two incidents. Cheaters are everywhere, there is no platform i know about where cheaters are not exist. So being smart is the only way to beat them.
Hardware wallets are safer to use than of any online wallets but as we indulge in the online system of payment or transactions still it is prone to hacking especially when we misclick site into pishing sites. This is a reason why we can't be 100% secured and the only thing that we should have to do and so we don't fall into this is to be careful in visiting sites. The security of our wallet lies to us, on how we handle it and how bulgar we are into the other people which is giving them a chance to copy our keys and get control over our wallet.