GoKawiilTrezor customers hit by phishing wave after Brevo email vendor breach
Trezor disclosed that hackers who compromised 138 accounts at email marketing provider Brevo used the access to send roughly 347,000 phishing emails to its customers. The messages, disguised as security alerts, directed recipients to a fake app designed to steal their wallet backup passwords. Trezor says its own products and account systems were not breached, but the stolen credentials could let attackers drain victims' crypto holdings.
GoKawiil's interpretation of the reporting above, not reported fact.
This marks the second third-party breach affecting Trezor in as many months, following an August incident at shipping partner ShipMonk that exposed customer contact details. Together, the breaches show how attackers are increasingly targeting hardware wallet makers' vendors rather than the devices themselves, and how leaked personal data can escalate into both financial theft and physical safety risks for known crypto holders.
- Hackers exploited 138 compromised Brevo accounts to send about 347,000 phishing emails to Trezor customers.
- The phishing scheme used fake security alerts to trick victims into revealing their wallet backup passwords.
- This is Trezor's second vendor-related breach in two months, following a ShipMonk data exposure in August.
Trezor Safe 5 Hardware Wallet — Even with the phishing scare, a hardware wallet keeps your keys offline and off your phone — and Trezor's Safe 5 adds a color touchscreen so you can verify every transaction on the device itself. Just remember: no legitimate wallet ever asks for your recovery seed via an emailed app.
See Trezor Safe 5 Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techcrunch.com — Zack Whittaker, 2026-09-11
Published there as: “Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.