The data breach "only" affected customer data (huge dataset of emails and a smaller dataset including names, mobile numbers and full address).
No cryptos where at risk. No vulnerability has been found. No one except you has access to the funds on your hardware wallet.
I wouldn’t call the 272 000 full dataset a small number, that’s significantly more than the initial 9500. While no one has literally lost their crypto with this data leak, everyone whose public data has been released is exposed not only to daily phishing messages, but also to possible physical attack at any time in the future. Although Ledger is officially trying to minimize the possible consequences, all those who are victims of this hacking certainly cannot sleep peacefully when they know that all criminals in the world have been given information about those who keep cryptocurrencies in this way.
But your comment is more perfect, going to store, buying it physically will be the best.
And if that option doesn't exist, it doesn't cost anything to send a request to certain stores in your area to put such devices in their offer. Of course, I am thinking primarily of IT equipment stores that have a good reputation.