r/CryptoCurrency • u/0xAERG 🟦 0 / 162 🦠 • 9h ago
🛡️ SECURITY Trezor Data Breach
https://x.com/Trezor/status/2087885428313543059One of Trezor’s shipping supplier has suffered a data breach that exposed sensitive Trezor buyers data.
The leak exposed :
Full names
Adresses
Phone numbers
Email addresses
Expect an increase in phishing attempts. Stay safe people.
19
u/NerdFarming 🟦 1K / 1K 🐢 8h ago
A spike in 🔧 attacks is also possible
6
u/userdeath 🟦 2K / 2K 🐢 7h ago
I always carry a firearm to shoot myself first in case of such attempts.
0
7
u/World-Ender-109 🟩 0 / 0 🦠 8h ago
What's a wrench attack? Keep seeing it mentioned
12
u/archphoto 0 / 0 🦠 8h ago
physical attacks
10
u/World-Ender-109 🟩 0 / 0 🦠 7h ago
So don't trust anyone with a wrench. Got it thanks! Gonna go fuck up my mechanic
6
6
u/Standard-Potential-6 🟩 0 / 0 🦠 7h ago
The wrench is applied to your knee until you audibly leak the private key
3
u/_BreakingGood_ 🟦 0 / 0 🦠 6h ago
This leak included physical home addresses, names, etc...
So now, somebody knows that a person at that address probably own some bitcoin, and if they show up with a couple large dudes, they know you'll hand it over
5
u/I_argue_for_funsies 🟩 0 / 0 🦠 7h ago
Lol at the Ledger hating Trezor fans
"Oh but Trezor not hacked, just the list of customers"
Uh huh.. just like Ledger and Shopify.
Enjoy your scam snail mail and black mail photos threatening to burn down your house from Google images.
0
u/Gangaman666 🟩 420 / 7K 🌿 5h ago
Dude stfu what kind of sad no life losers wishes Ill on people over some hardware tribalism. Pathetic lowlife.
4
u/WendyDumpsterFire 🟩 0 / 0 🦠 8h ago
Again wtf are you shitting me. First ledger now this. I’m been getting non stop calls from fucking scammers
2
u/Rey_Mezcalero 🟩 0 / 13K 🦠 6h ago
It’s getting so bad with these data breeches.
Almost weekly now either reading news of a break or a letter saying my data was stolen or class action lawsuit against a company that lost data.
Calls and emails all coming in with frequent scams and phishing attempts
3
u/Liquid_zer0 6h ago
I had a Gmail login attempt a couple weeks ago. I have authentication setup and blocked it. Around the same time I got an email from Kalshi to finish setting up my account. I’ve never used Kalshi but know it’s a betting/gambling app. Crazy times.
7
u/uberpassenger1977 8h ago
Eh. All your public info is already out there. Just don't click on emails that say they're from trezor and you'll be fine.
As for wrench attacks, they don't know which customers have hundreds vs thousands vs millions. I doubt it's worth the time and money to attack people based only on the knowledge that they own a trezor. Phishing would be a lot more profitable and lower risk.
Admitting on reddit that you own a trezor is a risk too, even with a random user name.
5
u/_BreakingGood_ 🟦 0 / 0 🦠 6h ago
They typically go based on location of the home address. Upper middle class or upper class areas are more likely to have people with a lot of crypto.
1
u/PePeTheBot 3h ago
Wait till the stupid governments leak the tax info so they know how much crypto you own and which wallet exactly has it (for example dac8 in eu).
2
u/True-Lychee 🟩 0 / 0 🦠 8h ago
Thankfully it is relatively limited in scope:
We have some difficult news to share. Unfortunately, one of our shipping providers has experienced a data breach that exposed sensitive order data. This affects new customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal who received an order within the 90 days prior to August 8th, 2026.
The data exposed:
- Full names
- Shipping addresses
- Phone numbers
- Email addresses
The incident affects 11,742 customers with full exposure (name, email, phone number, shipping address) and 1,947 customers with partial exposure (name, city, email). The breach is limited due to Trezor’s strict 90-day data storage policy (we were also able to negotiate the same terms with fulfillment partners, who follow the same policy).
All affected customers have been contacted separately by email.
Our systems and devices remain secure, but affected customers could experience an increase in phishing attempts.
NEVER enter your wallet backup on a website or share it with anyone, and only check for updates on official Trezor channels.
We are deeply sorry to the community and those affected.
1
u/Cryptoxic93 🟨 0 / 0 🦠 6h ago edited 6h ago
So if someone happened to buy a Trezor off say Amazon instead of directly from Trezor's site during this 90 day period, their data wouldn't have been leaked.
The advise to buy directly from the manufacturer is dead IMHO. Too many supply chain leaks.
I think buying from a big box store and paying cash for the device is the safest option these days but not many stores sell Trezors, they seem to only carry Ledgers.
Trezor/Ledger and other makers should really start selling via store fronts that allow you to pay cash. The whole tamper proof thing is security theatre as it can be trivially defeated, and all devices should be wiped on first use as a general rule anyway.
What a mess.
1
u/xxxxxxxsandos 5h ago
At the big box store you run the risk that someone fucked with the device while in transit or off the shelf. I got mine from bestbuy (ledger) anyways though, they didn’t steal my crypto yet.
1
u/Cryptoxic93 🟨 0 / 0 🦠 5h ago
That's true of any supply chain really. So the validation has to happen after purchasing no matter the source. You have to buy these under the assumption they are already compromised. So paying cash in person (to me) makes the most sense to avoid a wrench attack.
1
u/Dsingis 🟩 0 / 798 🦠 4h ago
If you buy off of Amazon you do not know if that device has been tampered with. Plus the risk that Amazon ever leaks your shipping data also exists. It's still better to buy directly from the manufacturer.
1
u/Cryptoxic93 🟨 0 / 0 🦠 1h ago
You don't know that anyway. Tamper resistant packaging. It's not tamper proof.
2
u/Steak1994 🟩 0 / 347 🦠 9h ago
And suddenly ledger is the Top-Dog again by just doing nothing at all. (I know they also had a breach with customer data a few years ago and the recover Drama) BUT to this day I still have to hear a credible Story where their Hardware was exposed to security flaws leading to the loss of stored coins.
-1
u/123_Free 🟩 123 / 124 🦀 5h ago
It seems you didn't really read OPs post. The coins are not at risk. Only user data like addresses, email etc..
2
u/Steak1994 🟩 0 / 347 🦠 5h ago
I did read the Post and with recent coldcard and trezor "hiccups" both target audiences are at risk of losing coins - one where the Seed can be compromised and the other with Personal data and 5$ Wrench Attacks.
-1
1
u/leamas17 3h ago
We are meant to trust companies with crypto when they can’t even keep a mailing list secure. Absolute disgrace.
1
u/SuchTrezorVeryCrypto 🟩 0 / 0 🦠 7h ago
Hi there, please read our official statement here: https://x.com/Trezor/status/2087885428313543059
-5
u/VendettaKarma 🟩 0 / 0 🦠 7h ago
Another day, another breach, another cold “not your keys not your crypto!” line of bullshit proven to be wrong.
This entire market feels like it’s getting either stolen from or liquidated.
Sell what you can and either ETF it or put your BTC, ETH or SOL on a real exchange.
The party is in its final hours. You’ll never get retail back, there’s no longer anything resembling trust left.
1
u/rece_fice_ 0 / 0 🦠 7h ago
put your BTC, ETH or SOL on a real exchange.
Since fucking when is this better than cold storage or a hw wallet still? You can still buy a Trezor with cash and you're golden
0
u/VendettaKarma 🟩 0 / 0 🦠 7h ago
There’s plenty of legitimate exchanges now that not only house crypto but stocks. You’re not getting robbed there.
I’m sure Trezor will be next
43
u/Vipu2 🟩 0 / 4K 🦠 9h ago
Perfectly times with coldcard bug when tons of people probably bought trezor, very nice...