google have filed a ticket in one of its partner communication portal (APVI) in late october, disclosing a massive attestation key leak involving compromised factories
google have outlined that they are partnering with impacted OEMs to update keyboxes, trying to "eliminate any potential impact to user devices"
h/t：南宮雪珊