Trezor Customer Information Exposed, Phishing Risks Increase

Trezor has reported that 13,689 customer order details were exposed due to a breach at the logistics company ShipMonk, increasing the phishing risks targeting hardware wallet users. On August 13, Trezor stated in a blog post that 11,742 records were fully exposed, while 1,947 were partially exposed. The fully exposed information includes names, email addresses, phone numbers, and shipping addresses, while the partially exposed information includes names, cities, and email addresses. This breach pertains to orders placed between May 10, 2026, and August 8, 2026, and Trezor was notified of the unauthorized access by ShipMonk on August 10. The exposed information could be used for impersonation attacks, with attackers potentially prompting users to enter wallet backups or recovery phrases via email, phone, or postal mail. Security firm Rapid7 has identified traces of AI-assisted development and fake apps, and Trezor has warned that any requests for wallet backups, recovery seeds, PINs, or passwords in communications should be considered fraudulent. BleepingComputer reported that physical mail was sent to Trezor and Ledger users, and scanning QR codes could lead to fake websites. This incident is a case of a logistics company breach combined with social engineering attacks, with the total confirmed losses not disclosed.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.