Trezor (SatoshiLabs)
LowConfirmedDigital services
An attacker exploited an authorization flaw in newsletter platform Brevo, Trezor's third-party email provider, to access 138 Brevo customer accounts and, on September 9, 2026, send a phishing email from Trezor's legitimate domain. The message, mimicking a security alert about a fabricated STM32 chip vulnerability, reached roughly 347,000 Trezor newsletter subscribers and asked them to hand over their wallet backup. Trezor took the fraudulent domain down within about twenty minutes, but roughly 2,500 people had already clicked the link.
Access to the subscriber list allowed a credible phishing email appearing to come from Trezor's official domain, aimed at getting recipients to hand over their wallet recovery backup and thereby enabling theft of the associated crypto assets.
- Disclosed on
- September 10, 2026
- Incident dated
- September 9, 2026
- Accounts affected
- 347,000
- Sector
- Digital services
- Country
- Czechia
- Cause
- Third-party provider
Exposed data
- Email address
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Trezor warns users of email provider breach, phishing attacksBleeping Computer
- Trezor, BitBox users targeted in newsletter phishing spreeThe Register
- Brevo Login Breach Affected Trezor, BitBox and CoinTrackingCointelegraph
- Multiple crypto companies warn customers of phishing emails after alleged provider breachThe Record
- Trezor's summer of hacks continues with Brevo email breachProtos
- Trezor Details Brevo Breach Behind Fake Security AlertCryptoTimes
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact