Major Security Alert: Trezor Suffers Data Breach, 14,000 Bitcoin Wallet Users Affected!

Hardware wallet manufacturer Trezor has publicly disclosed a significant data breach, affecting nearly 13,689 customers across several countries. The company announced on X that customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who had received an order within 90 days prior to August 8 were impacted. The incident stemmed from an unauthorized access to the systems of ShipMonk, a third-party fulfillment partner of Trezor's parent company, SatoshiLabs.

Trezor confirmed that while their internal systems and devices remain secure, the exposed data could lead to an increase in phishing attempts targeting affected individuals. The company expressed deep regret for the incident and highlighted the potential risks, warning that scammers might use the leaked information for fake emails, phone calls, fraudulent letters, or even to impersonate banks, crypto exchanges, or Trezor itself.

A breakdown of the exposed data indicates that 11,742 customers had their names, email addresses, phone numbers, and shipping addresses compromised. Another 1,947 customers had a slightly less extensive leak, with only their names, cities, and email addresses exposed. SatoshiLabs stated that investigations into the incident are ongoing.

This data breach is not an isolated incident within the cryptocurrency hardware wallet sector. Personal data of Bitcoin users has frequently been a target for cybercriminals. Notably, in 2020, popular hardware manufacturer Ledger experienced an unauthorized access to its e-commerce and marketing database, resulting in the leakage of over a million email addresses and personal contact data for nearly 10,000 customers. Earlier this year, Ledger customers also reported receiving emails regarding a data breach at Global-e, Ledger’s payment partner, which exposed sensitive customer information from its cloud systems.

Adding to the concerns, the Bitcoin community is also grappling with recent attacks on Canadian company Coinkite's popular Coldcard product. Hackers began draining substantial amounts of Bitcoin from these hardware wallets, with initial estimates of stolen funds around $111 million, a figure that continues to rise as investigations progress and could potentially exceed $130 million. These incidents collectively underscore the persistent and evolving cybersecurity challenges faced by users and manufacturers in the hardware wallet ecosystem.