Trezor Breach Widens as 67,000 More Users Exposed

Trezor’s data breach has widened, with the hardware-wallet maker disclosing that 67,000 additional customers were exposed after attackers gained access to a third-party support system. The company said some of the compromised records date to 2019, well beyond the 90-day retention period Trezor said its partners had agreed to follow.

The expanded disclosure underscores a familiar but material risk in digital asset custody: even when private keys remain offline, customer data, support tickets and account metadata can still create a meaningful attack surface. For hardware-wallet users, the immediate concern is not necessarily direct wallet compromise, but the possibility of phishing, social engineering and identity-targeted fraud.

The fact that records persisted for years suggests a breakdown in vendor governance and data minimization practices. In crypto, where users often rely on pseudonymity and self-custody to reduce counterparty risk, exposure of historical support data can weaken those protections and increase the odds of follow-on scams.

The incident also arrives at a time when market sentiment remains elevated, with the Fear & Greed Index at 74, indicating greed. That backdrop can amplify the damage from security headlines, particularly if users respond by moving funds, changing custody arrangements or reassessing their reliance on third-party service providers.

For Trezor, the operational issue now extends beyond breach containment. The company faces scrutiny over vendor oversight, retention enforcement and the adequacy of its incident response. For the broader sector, the disclosure is another reminder that security in crypto is only as strong as the weakest link in the service chain.