This is a personal statement about an experience with the Ledger Cold Wallet. A few days ago, I had a withdrawal from my Ledger wallet without connecting the device to a computer.
If the private keys are the only way to transfer funds, and these keys don't come out of the physical Ledger device, how is it possible that funds were withdrawn?
I've contacted the company, and they're reviewing the data. I'm waiting for their response.

What could have happened?

   The seed phrase is written on paper and has never been in digital format. It's stored where I have the deeds to the house.
   I only connect the Ledger when I perform currency exchange transactions, and then it's stored there.
   It was purchased directly from the factory and was sealed.
   No one else enters my home.
   I have an active, licensed, and updated antivirus (Kaspersky).
   I've never been asked for the seed phrase, either online or in person.
   Ledger is protected with an eight-digit numeric key. Ledger Live and physical device updated.

Be careful, mine has been cleaned.
I'll keep you updated.