Trezor Warns of Data Breach at Email Provider, Exposing Customers to Phishing Attacks
Hardware wallet provider Trezor has warned customers that a data breach at its email service provider, Brevo, led to the sending of over 347,000 phishing emails. The attack exploited a flaw in Brevo’s system, allowing hackers access to 138 accounts and enabling them to send malicious messages disguised as official Trezor communications. These emails contained links that prompted victims for their wallet passwords, which could lead to irreversible theft of cryptocurrency funds. This is the second breach affecting Trezor customers within months; in August, a shipping partner named ShipMonk exposed personal data from 81,000 individuals who had purchased hardware wallets. The latest incident underscores growing concerns around third-party vulnerabilities and their impact on customer security. Trezor confirmed that its own systems were not breached but is reevaluating vendor relationships to prevent future incidents.
Topics: crypto_wallets cybersecurity phishing third-party_risk