Back Coinex

Trezor and BitBox Warn of Phishing as Shared Email Provider Comes Under Scrutiny

Coinex • September 10, 2026

CoinEx News: Trezor and BitBox warned on September 9 phishing emails disguised as urgent hardware wallet security alerts. Trezor confirmed a breach at its email provider, while BitBox said its preliminary review pointed to a likely provider compromise affecting several Bitcoin companies using the same service. The messages impersonated official notices; their claims do not establish a hardware wallet flaw.

Users holding crypto in these wallets should verify alerts through independently opened official channels and never submit recovery words, which unlock access to funds, through email links or supposed security checks.

Disclaimer: The current content is provided for reference only and does not constitute any investment advice from CoinEx. The prices of cryptocurrencies are highly volatile, please be aware of the potential risks.

Coins Price 24H Change

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Trezor Data Breach Exposes 80,689 Customers to Phishing Risks A significant data breach at Trezor's logistics partner, ShipMonk, has exposed personal information of approximately 80,689 customers, including names, email addresses, phone numbers, and shipping addresses. The breach was enabled by a critical SQL injection vulnerability (CVE-2026-72898) in the Metabase analytics platform, which allowed attackers to gain unauthorized access to customer data. The initial disclosure on August 13, 2026, reported 13,689 affected customers, but subsequent investigations revealed an additional 67,000 customers were impacted, with data dating back to orders from November 2019 to August 2021. Trezor has warned affected customers to be vigilant against phishing attempts, as the leaked information could be used for scams and fraudulent communications. The company has stated that its own systems remain secure and that no wallet funds were compromised. Investigations are ongoing, and Trezor is working on implementing more secure shipping options to protect customer data in the future. 43 sources 70

Extracted Entities

Trezor and BitBox Warn of Phishing as Shared Email Provider Comes Under Scrutiny

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)