Trezor Data Breach Exposes 347,000 Users to Phishing Attacks

Trezor data breach — Hardware wallet manufacturer Trezor has disclosed a data breach affecting 347,000 customers after scammers compromised its third-party marketing platform. The breach occurred on September 9, 2026, via the newsletter service Brevo.

An unauthorized actor accessed Brevo’s system and sent a phishing email designed to look like a legitimate ‘Critical Security Alert’ from Trezor. The email contained a malicious link prompting users to download an app and enter their wallet backup seed phrase. Trezor stated it took down the fraudulent domain within 20 minutes, but not before approximately 2,500 people had clicked the link.

The company confirmed no internal Trezor systems were compromised and that it has suspended its Brevo account. This incident marks the latest in a series of security issues for Trezor involving third-party vendors, following breaches at its fulfillment partner ShipMonk last month that exposed data of nearly 79,000 customers.

Trezor reiterated that it never asks customers for their wallet backups and urged users to be vigilant against phishing attempts. The breach highlights ongoing risks to user data within the crypto ecosystem, following similar incidents targeting customers of Ledger and SafePal this year.