Trezor Confronts Security Breach, Protects Digital Assets Amid Phishing

Trezor, a prominent hardware wallet provider, recently reported a breach in its external support ticket system. This security lapse, as detailed in a Trezor blog post, resulted in the unauthorized disclosure of contact details for approximately 66,000 users during a phishing expedition. These affected individuals are likely those who have engaged with Trezor’s support since late 2021.

Founded in 2013 by the Czech-based Satoshi Labs, Trezor reassured that no digital assets were jeopardized in this event.

In response to the breach, Trezor is conducting a thorough investigation in collaboration with the involved third-party service. Concurrently, the company has proactively notified all impacted users via email about the incident and the potential exposure of their contact information to phishing risks. This step reflects Trezor’s commitment to transparency and its preventive approach to customer safety.

Despite the company’s history of security challenges, including a previous hack of its Trezor T model reported by the cybersecurity group Unciphered in October 2023, Trezor has consistently addressed these issues. For the Trezor T hack, which required physical access to the device, specialized tools, and knowledge of a unique exploit method, Trezor effectively fortified the device’s firmware to prevent future breaches.

Additionally, a 2023 incident highlighted the dangers of counterfeit hardware wallets when a crypto investor lost approximately 1.33 Bitcoin due to a fake device resembling Trezor’s product, as reported by Kaspersky. This incident underscores the critical importance of vigilance in the digital asset space, a principle Trezor continues to champion. The company’s prompt response to these threats and its ongoing efforts to enhance security measures demonstrate its dedication to safeguarding its customers’ assets and information.

source