Trezor Reports Another Security Incident: What Users Should Know
Trezor said attackers breached its third-party email provider and sent customers a phishing email disguised as a critical chip security alert, the companys third vendor failure in four weeks. The hardware wallet company said it took down the domain behind the campaign and is investigating how attackers reached its legitimate domain. Reportedly, wallets, keys, and recovery backups were never exposed. Trezors Email Provider Breach Follows the ShipMonk Leak An August 10 incident at ShipMonk, the partner that ships Trezor orders, started the run. A September 4 update pushed the number of exposed customers above 80,000. Discover more Trade Crypto Assets Choose POS Systems Finance That leak held names, phone numbers, and home addresses. BeInCrypto reported in August that devices stayed safe while the phishing and scam risk climbed. Customers have since reported scam calls and printed letters. The pattern is old. Trezor warned 66,000 users after a support portal breach in 2024, and rivals have stumbled too, with SafePal leaking nearly 40,000 records last month. The devices hold up. The partners holding customer data do not. Why the Fake STM32 Alert Works The email arrived as a critical security alert about an “STM32 Entropy Vulnerability.” STM32 names the family of small chips inside Trezor devices. Entropy is the randomness a wallet uses
