It sounds like it was from the blockchain, not the Ledger app. If someone sends you an NFT with a link to claim it....kind of suspicious, no? This happens a lot, sorry it happened to you. You probably authorized the webpage to take your coins.
Well, it seems that's the case...
At least somebody notices it and skips it. But again, my issue is that it was inside their app and they have to be more vigilant or have some safety measures. Plus they have to compensate people at some point and not only by saying "Don't share your password". We are not back in 2011...
The only way you can maybe get Ledger to compensate you is if you threaten to go to the media with this.
What amount are we talking about here?