Trezor Confirms Security Breach Led to Phishing Emails

Popular hardware wallet maker Trezor is warning its users about a fresh wave of phishing attacks. The security incident stems from a recent breach at ShipMonk, a third party shipping provider used by the company. That earlier breach exposed personal customer details, including shipping addresses and contact information.

Attackers managed to send malicious emails directly from a legitimate domain, making the scam messages look very convincing. Trezor has urged users to stay extremely cautious. You should never share your seed phrase or private keys with anyone, especially via email links.

Security incidents involving third party vendors remain a major headache for the crypto industry. While hardware wallets keep private keys safe offline, customer databases remain vulnerable targets. Keep a close eye on your inbox and verify any communication through official channels before clicking links.