Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
News Source
β’Fri, 11 Sep 2026 13:32:54 +0000
π° What Happened
The maker of crypto wallets Trezor says hackers attacked Brevo, a company it uses to send emails. The attackers sent about 347,000 phishing emails to Trezor customers. The messages looked like security alerts and pushed a fake app that asked for wallet passwords. With that password, a thief can steal every coin on the wallet, with no way to reverse it.
Brevo said hackers got into 138 accounts by using a flaw that gave them too much access.
π The Backstory
This is the second breach linked to Trezor in a few weeks. Trezor says its own products and systems were not hacked. Instead, an outside supplier was the weak link.
Attacks on suppliers are a common way to reach a company's customers, because firms share data with many partners. Firewalls around a single company do not help when a partner is careless. Crypto theft is also hard to undo, because payments are final.
π― Why It Matters
If you own crypto, one stolen password can wipe your savings with no refund. Always check emails and never share your wallet recovery words with anyone.
The maker of crypto wallets Trezor says hackers attacked Brevo, a company it uses to send emails. The attackers sent about 347,000 phishing emails to Trezor customers. The messages looked like security alerts and pushed a fake app that asked for wallet passwords. With that password, a thief can steal every coin on the wallet, with no way to reverse it.
Brevo said hackers got into 138 accounts by using a flaw that gave them too much access.
This is the second breach linked to Trezor in a few weeks. Trezor says its own products and systems were not hacked. Instead, an outside supplier was the weak link.
Attacks on suppliers are a common way to reach a company's customers, because firms share data with many partners. Firewalls around a single company do not help when a partner is careless. Crypto theft is also hard to undo, because payments are final.
If you own crypto, one stolen password can wipe your savings with no refund. Always check emails and never share your wallet recovery words with anyone.