Trezor Users Targeted in Phishing Attack Following Brevo Data Breach

Trezor, a manufacturer of Bitcoin hardware wallets, has reported a data breach involving its third-party marketing platform, Brevo. The breach allowed attackers to send phishing emails to approximately 347,000 Trezor customers, using the company's domain to make the fraudulent messages appear legitimate. The emails contained malicious links that encouraged recipients to download applications and enter their wallet backups.

In response to the incident, Trezor acted swiftly, shutting down the compromised domain at the DNS level within 20 minutes to prevent further access to the malicious links. However, it was noted that around 2,500 users had already clicked on the links before the shutdown. To mitigate the situation, Trezor has suspended its Brevo account to halt any further phishing attempts and reassured customers that its other systems remain secure, emphasizing that Trezor never requests wallet backups from users.

This incident follows a series of security breaches affecting Trezor and other cryptocurrency-related companies. Last month, Trezor disclosed a breach involving its fulfillment partner ShipMonk, which compromised the data of 11,742 customers. Additionally, another breach exposed the personal information of 67,000 U.S. customers. Other companies in the cryptocurrency sector, such as Ledger and SafePal, have also faced similar security challenges this year, highlighting ongoing vulnerabilities in the industry.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News