It's not an app and keys were not stolen
No, it’s a hardware wallet and the keys were stolen remotely. Without an internet connection, even.
1