Yes, $2 million was stolen from a Trezor One hardware wallet in the past. However, Trezor has made a statement claiming that the exploit has been corrected and it is almost impossible to steal from a Trezor wallet again.