Hardware wallet maker Trezor disclosed that attackers compromised its third-party email service provider, enabling them to send phishing emails from Trezor's legitimate domain. The fraudulent emails falsely claimed a security flaw in STM32 hardware had weakened recovery phrases on some devices.
Hardware wallet maker Trezor disclosed that attackers compromised its third-party email provider Brevo, enabling phishing emails to be sent from Trezor's legitimate domain to approximately 347,000 newsletter subscribers.
Hardware wallet manufacturers Ledger and Trezor are jointly urging the cryptocurrency industry to adopt more responsible disclosure practices for security vulnerabilities, with concerns mounting about AI-enabled threats. The rare collaboration between competitors aims to improve security standards across the hardware wallet sector.
Hardware wallet manufacturer Trezor disclosed that an additional 67,000 U.S. customers were affected by a data breach at shipping partner ShipMonk, bringing the total to over 80,000 exposed customer records. The breach involved personal information including names, email addresses, phone numbers, and shipping addresses from orders dating back to 2019, despite Trezor's belief that ShipMonk had deleted the data as certified.
Hardware wallet manufacturer Trezor disclosed on September 4 that an additional 67,000 US customers were affected by the ShipMonk shipping partner data breach, bringing the total to approximately 80,700. The breach exposed names, addresses, and phone numbers of customers who ordered between November 2019 and August 2021.
Cryptocurrency wallet provider SafePal disclosed a security breach that exposed names, physical addresses, and contact details of 39,798 customers. The breach follows a similar incident at Trezor days earlier that affected 13,689 users.
Hardware wallet manufacturer Trezor disclosed that approximately 14,000 customers across seven countries had their names, email addresses, and shipping information exposed after unauthorized access to systems at ShipMonk, its third-party fulfillment partner. The company emphasized that customer wallets and funds remain secure.
