Trezor reports a possible leak of 66 000 users’ contact information

The incident was caused by a third-party service provider

22.01.2024 - 13:25

245

2 min

What’s new? Trezor, a hardware crypto wallet maker, has launched an investigation into a security incident that occurred on January 17, caused by a third-party service provider for registering support requests. It potentially affected the data of 66 000 users who had contacted tech support since December 2021. An internal audit at Trezor concluded that unknown individuals could only access customer emails and names/nicknames, and no digital assets were compromised.

Trezor’s report

What else is known? Trezor noted that the attackers started using the obtained data to launch phishing attacks. The company personally notified each victim of this, urging them to be vigilant.

Thus, unknown people on behalf of Trezor wrote to customers who contacted the technical support that “to better understand & look into your issue please reply with the 24 word phrase you were given when you setup your Trezor device,” which is allegedly needed “to check the firmware version of your device.” In reality, the seed phrase allows access to the wallet and asset management and should not be shared with unauthorized parties.

Seed phrase as a modern cryptocurrency security standard

Keep the seed phrase as the apple of your eye - that's the advice you can give to anyone starting their journey in cryptocurrencies

So far, the attackers have only directly contacted 41 customers via email. The company believes that no other personally identifiable information, including mailing addresses and phone numbers, was disclosed.

Trezor representatives apologized and assured that the company’s crypto wallets remain fully protected.

Last October, Trezor released a new wallet for the first time in five years. The Safe 3 model supports more than 7000 digital assets.

Author: