Hi guys,
Thanks for all input but there are still many questions. First of all trezor gave me the explanation that i got hacked because i entered the incorrect website
https://wallet.trczor.com/However the browser history shows a visit to this fake website one hour prior to the hack. On the time of the hack the browser history shows i was on the correct and legit Trezor website. In addition my Trezor transaction sheet shows a payment to Bitrefill and at exactly the same time a transaction (hack) which lead to the hack of 28+ BTC!!
https://www.blockchain.com/btc/address/3FRVjBLarohsczz15uWsBhxPPeZHY5Ngdm After reading your history, I think I will split my few BTCs in some different seeds in my ledger nano. There is also a functionality in ledger nano which allows you to keep 2 wallets using 2 different pins (one with a passphrase)
All in the same wallet is dangerous, even for a hardware wallet...