Crypto Wallet Maker Trezor Suffers Customer Data Breach, Warns of Phishing Attacks

Overview of the Security Incident

Trezor, a leading provider of cryptocurrency hardware wallets, has announced that a data breach occurred at a third-party email service provider it utilizes. As a result, contact information—such as email addresses and names—belonging to hundreds of thousands of customers, including those from past inquiries, may have been exposed.

Scope and Impact of the Incident

This leak did not stem from Trezor's internal systems, but rather from unauthorized access to an external supplier's system. Trezor has emphasized that the security of its wallet devices and the private keys protecting users' cryptocurrencies remain unaffected by this incident, ensuring that user assets are safe.

Secondary Attacks and Countermeasures

Currently, targeted phishing attacks aiming at Trezor users are surging, exploiting the leaked information. Attackers are attempting to steal assets by tricking users into entering their wallet recovery phrases (seed phrases) via fraudulent emails and websites. Trezor is strongly urging users to avoid suspicious links impersonating the company and reiterates that under no circumstances should recovery phrases be entered online.