Hardware wallet maker Trezor has disclosed that an additional 67,000 customers in the United States were caught up in a data breach traced back to one of its shipping providers, raising fresh concerns about phishing and social engineering threats aimed at crypto holders.
What Happened
The breach originated not from Trezor's own systems but from a third-party logistics partner responsible for handling customer shipments. According to the company, the incident exposed personal information belonging to tens of thousands of US-based users, adding to the pool of individuals already known to be affected.
While Trezor emphasized that the compromised data does not include recovery seeds, private keys, or funds, the leaked details could still be leveraged by malicious actors. Names, contact information, and shipping records are precisely the kind of data that scammers use to craft convincing impersonation attempts.
Your crypto may be safe in cold storage, but your inbox has just become a bigger target.
The Phishing Risk
The primary danger stemming from breaches like this one is not immediate theft but the follow-on wave of targeted scams. Armed with verified customer details, attackers can pose as legitimate Trezor representatives to trick users into revealing sensitive information or approving fraudulent transactions.
Security experts have long warned that hardware wallet owners are prime targets for social engineering, since a single lapse can undo the protection of cold storage. Users are urged to remain skeptical of unsolicited messages and to verify any communication claiming to come from the company.
Trezor recommends that affected customers take several precautions:
- Treat any unexpected emails or messages referencing Trezor with caution
- Never share recovery seeds or enter them on any website
- Verify official communications through the company's authenticated channels
- Enable additional security measures where available
A Recurring Industry Problem
The incident underscores a persistent vulnerability across the crypto sector, where companies frequently depend on outside vendors that can become weak links in the security chain. Even firms with strong internal protections remain exposed when partners mishandle customer data.
For Trezor, the disclosure adds to an ongoing challenge of maintaining user trust while its core promise—keeping crypto assets secure—remains intact. The company has reiterated that no funds are at direct risk, but the growing list of affected customers highlights how data leaks can ripple outward long after the initial breach.