Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
ETH Trezor: The scope of the data breach far exceeded expectations, with nearly 67,000 U.S. user information exposed.
Hardware wallet manufacturer Trezor announced that the scope of the data breach is much wider than originally announced. According to the company's latest statement, the personal information of approximately 67,000 U.S. customers was leaked due to security incidents at logistics service providers. The incident poses new risks for phishing and social engineering attacks against digital asset holders.
Trezor emphasized that its own systems were not attacked, but that customer data stored at third-party service providers may have fallen into the hands of attackers. Therefore, users need to be vigilant, especially those suspicious messages that ask for wallet information.
Which Trezor users were affected?
According to the latest information released by Trezor, approximately 67,000 additional customers in the United States who placed orders between November 2019 and August 2021 may be affected. Trezor shared the information after receiving updates from logistics and shipping service provider ShipMonk.
The leaked data includes the user's name, email address, phone number, shipping address and order details. While this information does not provide direct access to cryptocurrency assets in wallets, it may make it easier for attackers to plan fraudulent activities against individuals.
Trezor pointed out that he had previously obtained written guarantees from ShipMonk to delete relevant order data, but later discovered that the data had not been removed from the system.
Is Trezor Wallet under threat?
In this incident, Trezor's hardware wallet infrastructure or users 'devices were not directly compromised. However, the disclosure of personal information could still provide an opportunity for attackers to disguise themselves as Trezor employees or official support teams to deceive users.
One of the main targets of such attacks is to fraudulently obtain a recovery key called a "seed phrase." If a user shares a mnemonic word, the attacker will have complete control of the relevant digital asset wallet.
Therefore, it is crucial that Trezor users never respond to any requests for mnemonic words via email, text message or phone call. Before clicking on a link, users should carefully check the sender's address and the domain name of the website they visit.
Why do phishing attacks pose a risk to cryptocurrency investors?
Phishing and social engineering attacks do not require the exploitation of blockchain or software vulnerabilities. Instead, attackers use psychological manipulation to induce users to perform harmful actions or leak sensitive information.
According to data from blockchain security firm Hacken, of the $482 million lost to the cryptocurrency industry in the first quarter of this year,$306 million was related to impersonation and social engineering attacks. This suggests that in addition to technical attacks, human error also poses a significant risk.
For example, in one incident in July, a cryptocurrency investor lost approximately $1 million after signing a malicious token authorization transaction on Ethereum.
What security measures should users take?
After this incident, Trezor users should first be alert to abnormal communications directed at them. Any message requesting a mnemonic, PIN code or private key in the name of official support should be considered a fraud attempt.
Especially for users who make long-term cryptocurrency investments, you should never enter a recovery key used to access your wallet on any website, nor should you share this information with anyone via phone, email or message. When encountering suspicious links, you should manually enter the official website in your browser to access them instead of directly clicking on the link.
This content does not constitute investment advice. Markets have high risks, so please conduct independent research before making investment decisions.
