Is your seed compromised?
What was your process when migrating from ledger to cold card? Did you create a new seed?
I see you had difficulties with cloning a cold card, lots of potential places you could be screwing up.
If you didn't send this TX I would consider yourself compromised and replace all electronics.