Trezor Breach: 66,000 Users at Risk, Funds Safe but Phishing Looms
Trezor, a leading manufacturer of cryptocurrency hardware wallets, disclosed a security breach that affected thousands of its users. According to a Jan. 20 announcement, a third-party support portal used by Trezor was accessed by an unauthorized party on Jan. 17. The breach potentially exposed the contact details of users who had contacted Trezor’s support team since December 2021.
Source: X
Trezor said it emailed all the affected users to inform them of the incident and the possibility of phishing attacks. Phishing is a type of cybercrime in which attackers impersonate a trusted entity to obtain sensitive information from individuals. Phishing is often used to steal login credentials, credit card numbers, or other personal information.
Trezor Breach: How Serious Is the Threat?
Trezor stressed that none of its users’ funds were compromised through the incident and that their hardware wallet devices remained as secure as before. However, the company warned that the exposed email addresses could be subject to phishing attempts and advised users to be vigilant and careful.
Trezor said that at least 41 users received direct emails from the attacker requesting sensitive information about their recovery seeds. Recovery seeds are a set of words that can be used to restore access to a hardware wallet in case of loss or damage. The hardware wallet company said that no recovery seed phrases were disclosed as a result of the incident and that it alerted the users who received the emails within an hour.
Furthermore, Trezor said that eight people who created accounts on the same third-party vendor’s trial discussion platform also had their contact details compromised. The company said it was working with the vendor to investigate the incident and prevent further damage.
Additionally, the company said that it takes security seriously and that it appreciates the trust and support of its customers. The company said that it will keep its users updated on the situation and that it welcomes any feedback or suggestions.
While the company has taken steps to address this breach and mitigate the risks for affected users, it serves as a stark reminder of the importance of cybersecurity in the digital asset space. Users must remain vigilant and practice safe habits to protect their valuable cryptocurrencies. Additionally, the company should conduct a thorough investigation into this incident and implement stricter security measures to prevent similar breaches from occurring in the future.
