Back Kucoin

Trezor Third-Party Email Provider Compromised; Phishing Emails in Circulation

Kucoin • September 10, 2026

ME News reports that on September 10 (UTC+8), hardware wallet provider Trezor disclosed that its third-party email service provider was compromised, leading to the spread of phishing emails. Trezor explicitly stated that these emails were not sent by the official team, has immediately taken down the related domains, and is conducting an investigation. Users are advised not to click on any suspicious links.

Previously, on August 13, Trezor revealed a data breach involving its fulfillment partner ShipMonk, exposing personal data of 13,689 Trezor customers. Among them, 11,742 customers had their full names, phone numbers, email addresses, and shipping addresses stolen, while 1,947 customers had their names, cities, and email addresses leaked. Trezor’s own systems were not breached; devices, private keys, and wallet backups remain unaffected, and the scope of the breach is currently contained. (Source: BlockBeats)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Trezor Data Breach Exposes 80,689 Customers to Phishing Risks A significant data breach at Trezor's logistics partner, ShipMonk, has exposed personal information of approximately 80,689 customers, including names, email addresses, phone numbers, and shipping addresses. The breach was enabled by a critical SQL injection vulnerability (CVE-2026-72898) in the Metabase analytics platform, which allowed attackers to gain unauthorized access to customer data. The initial disclosure on August 13, 2026, reported 13,689 affected customers, but subsequent investigations revealed an additional 67,000 customers were impacted, with data dating back to orders from November 2019 to August 2021. Trezor has warned affected customers to be vigilant against phishing attempts, as the leaked information could be used for scams and fraudulent communications. The company has stated that its own systems remain secure and that no wallet funds were compromised. Investigations are ongoing, and Trezor is working on implementing more secure shipping options to protect customer data in the future. 43 sources 70

Extracted Entities

Trezor Third-Party Email Provider Compromised; Phishing Emails in Circulation

The full story

Extracted Entities

Attack Types (2)

Companies (2)

MITRE ATT&CK (1)