GoKawiilTrezor confirms 347,000 emails exposed via Brevo breach, 2,500 users phished
Trezor disclosed that a breach at its third-party email provider Brevo let attackers send fake security alerts to its opt-in newsletter subscribers, reaching roughly 347,000 email addresses. The fraudulent messages warned of a fake microcontroller vulnerability and pushed recipients to a malicious app requesting wallet backup phrases; Trezor says 2,500 people clicked the link before it disabled the domain within 20 minutes.
GoKawiil's interpretation of the reporting above, not reported fact.
Hardware wallet makers rely on customers trusting official-looking communications, so a breach of a marketing vendor can be weaponized to bypass strong device security through social engineering. This is Trezor's third third-party vendor incident in under two years, following breaches at its support portal and shipping provider, highlighting how supply-chain vendors remain a persistent weak point for crypto security firms.
- 347,000 opted-in newsletter emails were exposed after attackers compromised Brevo, Trezor's email marketing platform.
- About 2,500 users clicked a phishing link before Trezor shut down the malicious domain within 20 minutes.
- This marks Trezor's third vendor-related security incident since January 2024, following breaches at a support ticketing system and shipping provider ShipMonk.
Trezor Safe 5 Hardware Wallet — If phishing emails have you rethinking how your crypto keys are stored, the Trezor Safe 5 keeps private keys offline on a dedicated device with on-screen confirmation for every action — so a fake "security alert" link can't quietly move your funds. It's the current flagship from Trezor, with a color touchscreen that makes verifying addresses and PINs straightforward. Remember: no legitimate email will ever ask you to type your recovery seed.
See Trezor Safe 5 Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-11
Published there as: “Trezor: 347,000 users targeted in phishing attacks after Brevo breach”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.