Trezor Email Provider Breached in Phishing Attack

Trezor email provider breached — Hardware wallet manufacturer Trezor has disclosed a security breach of its email newsletter provider, warning customers of a phishing campaign that falsely claimed a critical hardware flaw.

The company stated that an unauthorized party gained access to its email service provider on September 9, 2026. The attackers used this access to send fraudulent emails to a segment of Trezor’s contact list, masquerading as a security alert from the company.

The phishing email falsely warned recipients of a supposed hardware vulnerability that could expose their recovery seed phrases. Trezor has confirmed that no such vulnerability exists and that its hardware wallets remain secure. The company emphasized that the breach was limited to the third-party email marketing platform and did not compromise Trezor’s internal systems, customer databases, or any wallet firmware.

Trezor advised users to ignore the fraudulent email and to never enter their recovery seed on any website. The firm is investigating the incident with its email provider and has reported the attack to relevant authorities.