Trezor Data Breach May Have Exposed 67,000 Additional U.S. Users’ Personal Information
Summary
- Hardware wallet maker Trezor said an investigation by logistics partner ShipMonk found an additional leak of personal information affecting 67,000 U.S. customers.
- Trezor said affected customers’ digital assets could be at risk if the leaked personal information is used in phishing attacks.
- Blockchain security firm Hacken said phishing and social engineering attacks accounted for $306 million of the crypto industry’s total $482 million in losses in the first quarter.
Forecast Trend Report by Period
The scale of a personal data breach at hardware wallet maker Trezor was larger than initially estimated.
Cointelegraph reported on September 4 that Trezor said in a post on X that a new investigation by its logistics partner, ShipMonk, found additional personal information had been exposed for 67,000 U.S. customers who placed orders between November 2019 and August 2021.
The leaked data included names, email addresses, phone numbers, shipping addresses and order details. Trezor said ShipMonk had provided written assurances that the order data would be deleted, but it was not actually erased. The company said its logistics partner was responsible. Trezor’s own systems were not compromised.
The exposed information could still be used in phishing attacks, putting affected customers’ digital assets at risk. In such attacks, scammers impersonate Trezor and approach users to steal the seed phrase that controls a wallet.
Trezor previously said in August that information on 14,000 users had been exposed through the same logistics partner. In January 2024, it also disclosed that about 66,000 users who had contacted its customer support team since December 2021 were exposed to phishing risk.
Phishing and social engineering attacks are inflicting heavy losses even without code vulnerabilities. Blockchain security firm Hacken said $306 million of the crypto industry’s total $482 million in first-quarter losses came from those types of attacks.
