Companies disclosed that their logistics service providers had leaked data, leading to the release of personal information from nearly 14 million customers. The affected information includes name, e-mail, telephone number and receiving address. The company stated that its own system and hardware wallet had not been broken and that the user ' s private key remained secure.
Nearly 14,000 people were affected.
According to company disclosures, the complete contact information of 11,742 users was disclosed and some of the information of 1,947 users was affected. The incident involved a third-party distribution link, not a Trezor's own core wallet infrastructure.
- 11,742 users leaked
- 1,947 users partially leaked information
- Disclosure includes address and contact information
The company says the wallet and the private key are not affected.
Trezor states that the incident did not affect the hardware wallet equipment itself, either by wave or its internal system. The company stressed that the user ' s private key had not been leaked, which meant that the attackers could not directly control the assets in the user chain by virtue of the incident alone.
However, leaking identity and address information may pose a follow-up risk. For the holders of encrypted assets, the attackers may use it to launch more targeted fishing mail, social engineering attacks and even to link real identity to currency possession.
Users are at risk of targeted attack.
The risk of leaking such information goes beyond being online. The security pressures faced by the relevant users may increase further, as the receiving address and contact information may expose the connection between the user and the hardware wallet product.
In the encryption industry, hardware wallets are usually seen as high netting or long-standing storage tools commonly used by users. As a result, once personal identity information is linked to equipment purchase records, it is easier for the attackers to screen targets and implement targeted fraud or real-world threats.