The readers were hacked when they were werebuilt, "either during the manufacturing process at a factory in China, or shortly after they came off the production line." It's being called a "supply chain hack."
Sophisticated stuff, and yet another demonstration that these all-computer security systems are full of risks.