Trezor Hit by Another Data Breach After Third Party Hack

Hardware wallet manufacturer Trezor is warning its users about a fresh data breach after an unauthorized party gained access to a third party marketing platform. The breach allowed criminals to send fake emails to nearly 350,000 customers. Because the scammers managed to use the official Trezor domain name, the phishing messages looked very convincing and asked recipients to download an app and enter their wallet backup details.

Trezor reacted quickly by taking down the fraudulent domain at the DNS level within twenty minutes. This fast response limited the damage, preventing the malicious link from working for most users and restricting actual access to around 2,500 people who clicked it early on. The company also suspended its account with the marketing platform, called Brevo, to stop any further emails from going out.

This incident follows a string of recent security issues involving third party partners in the crypto hardware sector. Last month, Trezor disclosed that a fulfillment partner suffered a breach that exposed customer contact and order details. Other major wallet providers like Ledger and SafePal have also faced similar data leaks this year, as criminals increasingly target third party vendors to trick crypto holders.

Traders and everyday users should remain on high alert for suspicious messages regarding security updates or wallet backups. Trezor has reminded its community that the company will never ask customers to share their wallet backup phrases. Always check official channels directly before clicking any links or downloading software related to your crypto assets.