Trezor logistics vendor leak expands further: about 67,000 U.S. users added, total impact exceeds 80,000
Hardware wallet maker Trezor (SatoshiLabs) updated its disclosure on September 4: the scope of the data breach at logistics partner ShipMonk has expanded again, adding about 67,000 U.S. customers (order window roughly November 2019 to August 2021), bringing the total affected to about 80,000 people. The company said it had previously received written confirmation that the old data had been deleted, but the records remained in the vendor's system.
Key facts: the leak mainly includes names, email addresses, phone numbers, shipping addresses, and order numbers; Trezor's own systems, firmware, seed phrases/private keys, and wallet backups were not affected, and funds cannot be stolen remotely. The real risk lies in social engineering and phishing—attackers can use real order numbers to impersonate official support and trick users into revealing seed phrases; exposed addresses also raise the risk of offline attacks.
With the U.S. stock market closed for Labor Day over the weekend, security narratives are more likely to spread when macro news is quiet. Trezor is rolling out Anonymous Delivery and reminds users: the official team will never ask for seed phrases.
Compiled from public social media/news sources, not investment advice. $BTC #Trezor #硬件钱包 #安全 #美股
Hardware wallet maker Trezor (SatoshiLabs) updated its disclosure on September 4: the scope of the data breach at logistics partner ShipMonk has expanded again, adding about 67,000 U.S. customers (order window roughly November 2019 to August 2021), bringing the total affected to about 80,000 people. The company said it had previously received written confirmation that the old data had been deleted, but the records remained in the vendor's system.
Key facts: the leak mainly includes names, email addresses, phone numbers, shipping addresses, and order numbers; Trezor's own systems, firmware, seed phrases/private keys, and wallet backups were not affected, and funds cannot be stolen remotely. The real risk lies in social engineering and phishing—attackers can use real order numbers to impersonate official support and trick users into revealing seed phrases; exposed addresses also raise the risk of offline attacks.
With the U.S. stock market closed for Labor Day over the weekend, security narratives are more likely to spread when macro news is quiet. Trezor is rolling out Anonymous Delivery and reminds users: the official team will never ask for seed phrases.
Compiled from public social media/news sources, not investment advice. $BTC #Trezor #硬件钱包 #安全 #美股
