Trezor Confirms Phishing Attacks, No Funds Lost

Around 66,000 users of the hardware wallet Trezor were affected by a recent attack that led to people questioning the safety of these wallets. The contact information of all these users was leaked as per an announcement. 

Trezor acknowledged on Saturday that the attackers utilized the information, leading to unauthorized access to a third-party support portal on January 17. 

A Large Number of Trezor Users Affected

Trezor also stated that all the users who have interacted with the firm’s support team since December 2021 may have had their information leaked, leading to phishing attacks.

66,000 Users Informed via Email

“Although unconfirmed, we consider it our responsibility to inform our affected users of the possibility of their contact details having been exposed and at risk of a phishing attack,” said Trezor. 

The hardware wallet manufacturer has also emailed all the 66,000 users, letting them know of the incident. 

No Loss of Funds: Trezor

The firm also announced that no funds were lost because of the information leakage, while adding:

“We want to stress that none of our users’ funds have been compromised through this incident. Your Trezor device remains as secure today as it was yesterday.”

The attackers have contacted at least 41 people while requesting sensitive information about their recovery seeds. Notably, eight people who made accounts on the same third-party vendor’s trial discussion platform also had their information leaked. 

Alarming Users Within an Hour

As per Trezor, the firm notified people of the incident within an hour of it happening, and no seed recovery phrases were disclosed. 

“The potential exposure of email addresses might be harmful in the fact that the emails can be subject to phishing attempts. As of now, we have not observed any spike in phishing activity as a result of this security incident,” said the firm. 

As reported earlier, the firm confirmed a whopping 900% increase in its sales while highlighting its good reputation for prioritizing client privacy and security.