A cybersecurity firm tweeted screenshots from a hacker selling stolen data from Trezor, Ledger and KeepKey users. Investigations are underway.