Trezor reports a possible leak of 66 000 users’ contact information
The incident was caused by a third-party service provider
22.01.2024 - 13:25
598
2 min
0
What’s new? Trezor, a hardware crypto wallet maker, has launched an investigation into a security incident that occurred on January 17, caused by a third-party service provider for registering support requests. It potentially affected the data of 66 000 users who had contacted tech support since December 2021. An internal audit at Trezor concluded that unknown individuals could only access customer emails and names/nicknames, and no digital assets were compromised.
What else is known? Trezor noted that the attackers started using the obtained data to launch phishing attacks. The company personally notified each victim of this, urging them to be vigilant.
Thus, unknown people on behalf of Trezor wrote to customers who contacted the technical support that “to better understand & look into your issue please reply with the 24 word phrase you were given when you setup your Trezor device,” which is allegedly needed “to check the firmware version of your device.” In reality, the seed phrase allows access to the wallet and asset management and should not be shared with unauthorized parties.
Seed phrase as a modern cryptocurrency security standard
Keep the seed phrase as the apple of your eye - that's the advice you can give to anyone starting their journey in cryptocurrencies
So far, the attackers have only directly contacted 41 customers via email. The company believes that no other personally identifiable information, including mailing addresses and phone numbers, was disclosed.
Trezor representatives apologized and assured that the company’s crypto wallets remain fully protected.
Last October, Trezor released a new wallet for the first time in five years. The Safe 3 model supports more than 7000 digital assets.
Useful material?
Telegram 
Twitter Incidents
The Digital Crime Task Force will look for suspicious transfers on the Tron network and help police freeze funds before they are moved out.
Nov 12, 2026
Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Cryptocurrency rates
-
Bitcoin
$65 331
BTC
-4.85%
-
Ethereum
$1 822.33
ETH
-5.51%
-
Ripple
$1.42
XRP
+1.04%
-
BNB Smart Chain
$586.65
BSC
-7.11%
-
TRON
$0.308548
TRX
-1.42%
-
Zcash
$862.92
ZEC
-8.77%
-
Dogecoin
$0.060019
DOGE
-7.63%
-
Cardano
$0.218269
ADA
+2.11%
-
Stellar XLM
$0.184461
XLM
+2.83%
-
Polkadot
$3.32
DOT
+5.27%