Trezor Data Breach Exposes 13,689 Users, Crypto Wallets Remain Safe From Attack

Key Takeaways:

• Through a leak in the software of its shipping partner ShipMonk, Trezor disclosed private information related to approximately 13,689 users.
• Names, home and work address, and phone numbers and e-mail addresses are exposed, increasing the risk of targeted phishing.
• There has been no compromise of Trezor’s systems or hardware wallets and wallet backups were not compromised.

User Score

8.7

Trezor has warned customers about a data breach at ShipMonk, a third-party logistics provider responsible for fulfilling some Trezor orders. While no crypto wallets or Trezor systems were breached, the leaked personal information could give scammers more convincing ways to target crypto holders.

On August 10, ShipMonk informed Trezor of a third party accessing systems that contained customer orders. Trezor stated that it is continuing to investigate.

The company estimates that 11,742 customers had their names, email addresses, phone numbers and shipping addresses exposed. Another 1,947 customers may have had their names, city information and email addresses accessed.

The affected orders initially covered customers in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal who received orders during the relevant period.

Trezor claims it has a 90-day data retention policy which would mean that ShipMonk could only have historical data for 90 days. The company has since warned that the 1,947 partially exposed records could contain some that are older orders but is still confirming that detail with the logistics provider.

Any customer who got an official e-mail notification from [email protected] should feel the information was leaked. Trezor stated that those who missed that email are unaffected.

Read More: AI-Assisted Bitcoin Attacks Force Boltz to Shut Down Crypto Service

The breach did not affect Trezor’s internal systems, devices or wallet security.

Even if the information is stolen, it may still be useful to criminals if it contains information that could help to make a scam appear real.

A victim’s true name, phone number or delivery address could be used to impersonate services such as Trezor, a cryptocurrency exchange; bank or other trusted service. They can send emails, make phone calls and even use physical mail to try to force users to disclose these sensitive details.

Trezor’s warning comes as it advises customers who are potentially impacted to take special care of messages that urge them to act quickly or disclose personal information.

Above all, users must never enter their wallet backup or recovery seed into a website. According to Trezor, their customers will not have to reveal their wallet backup in order to access the legitimate support.

Read More: North Korean Hackers Deploy 3 Local AI Systems to Supercharge Crypto Attacks

The incident also led to Trezor emphasizing the various measures customers can take to minimize the tracking of personal information going into hardware wallet purchases.

The company suggests to use an e-mail address not associated with a real name, if cryptography payments are possible, and if possible, a P.O. Box.

Furthermore, Trezor is working on an Anonymous Delivery feature to mitigate exposure to shipping details, including locker picking up, neutral packaging, generic sender information and auto deletion of shipping identifiers upon delivery.

The post Trezor Data Breach Exposes 13,689 Users, Crypto Wallets Remain Safe From Attack appeared first on CryptoNinjas.