- Published on
Bitcoin Wallet Maker Trezor Says Hackers Breached Its Email Provider
- Authors
- Name
- DeepHorus
Trezor, the prominent Bitcoin hardware wallet manufacturer, announced that hackers breached its email provider, exposing user contact information. The incident, disclosed in January 2024, allowed attackers to send phishing emails to Trezor customers. The company warned that no funds were compromised directly, but the breach posed a significant security risk.
Trezor, founded in Prague in 2013, is one of the most trusted names in cryptocurrency storage. The breach occurred through a third-party email service provider, not Trezor's own infrastructure. This distinction is important because it means the attackers gained access to a separate system used for communications.
According to Trezor's security alert, the attackers obtained email addresses and names of users. They then launched a phishing campaign impersonating Trezor, offering fake rewards and urging recipients to download a malicious application. Some emails may have also attempted to trick users into revealing their recovery seeds, which are critical for accessing crypto wallets.
The implications of this breach are serious despite the lack of direct fund theft. Phishing attacks remain one of the most effective ways to steal cryptocurrency. If a user enters their recovery seed on a fake website, the attacker can drain the wallet completely. Trezor emphasized that it never asks customers to disclose their seed phrases under any circumstances.
In response, Trezor urged users to ignore all unsolicited emails and to verify any communication through official channels. The company also recommended enabling two-factor authentication and using a passphrase for additional wallet security. Users who suspect they received phishing emails were advised to report them to Trezor's support team.
Looking ahead, Trezor stated that it is working closely with its email provider and law enforcement to investigate the breach. The company is also reviewing its security protocols to prevent similar incidents. While hardware wallets remain secure, this event highlights the broader vulnerability of third-party services in the cryptocurrency ecosystem. Users are reminded to stay vigilant against phishing attempts and to protect their recovery seeds at all costs.
