I just got this text message.

“Ledger

{my name here} Ledger firmware has a critical vulnerability. Visit ledger.deals and update it immediately. Do not risk losing assets.”

So while I doubt there’s a critical vulnerability, Legder definitely got their contact list stolen. They should probably address this…

Be safe and question everything.