Trezor Hit by Email Breach as Phishing Attack Spreads

Popular crypto hardware wallet maker Trezor is dealing with a security scare after a third party email provider suffered a breach. Hackers used the incident to send convincing phishing emails directly from the company official domain. Trezor posted on social media to warn users about a fake message regarding a critical security alert, urging people not to click any links inside.

Another hardware wallet maker, BitBox, reported a similar impersonation campaign on the same day. The fraudulent emails used official looking signatures and domain names to trick customers into updating their devices over a supposed hardware vulnerability. Security commentators shared screenshots of the scam, highlighting how convincing the messages looked to unsuspecting holders.

This incident follows a rough month for Trezor regarding customer data privacy. The company recently disclosed that a breach at its shipping partner exposed personal details for tens of thousands of customers. Security experts remind all crypto holders to stay vigilant, use hardware wallets with care, and never enter seed phrases or wallet backups on any website.