I don't know who is going to be next (probably ledger), but I would say it could be any company that is depending on third party services for storing customers sensitive information.
Nobody knows how many times leaks like this happened in past, but news about this never got released in public.
Best way to avoid this is to buy in official shops with cash, or make make your own signing device.