Trezor Faces Security Alert After Email Provider Breach

Trezor is warning its users to stay alert after its third party email partner, Brevo, suffered a security breach. Attackers gained access to the email domain and sent messages to subscribers claiming there was a critical security vulnerability with the STM32 chip. These messages are fake and aim to trick users into handing over their wallet recovery phrases.

Trezor has already taken the compromised domain offline to prevent further damage. This incident follows a difficult summer for the hardware wallet maker, which also dealt with a significant data leak involving a separate shipping partner earlier this year. The company is currently investigating the situation to determine the full extent of the exposure.

Several other crypto companies including BitBox, CoinTracking, and Peach Bitcoin also use Brevo and have alerted their own users to watch out for similar scams. If you receive an email about a security alert from these services, do not click any links or provide personal information. Always check official company channels directly to verify security notices.