Trezor Says Hackers Breached Email Provider in Phishing Push

Trezor, the hardware wallet maker, said hackers breached its email service provider and used the access to distribute a fraudulent security alert to users. The message falsely claimed a hardware vulnerability could expose recovery phrases, a tactic designed to pressure recipients into revealing sensitive wallet credentials.

The company said the incident did not involve a direct compromise of its wallet hardware or customer funds. Instead, the attack exploited a third-party communications channel, a reminder that cyber risk in crypto often extends beyond blockchain infrastructure and into the vendors that support it.

Phishing campaigns remain one of the most effective tools used by attackers against digital asset holders. In this case, the false warning attempted to create urgency around a supposed device flaw, a common social-engineering method that relies on fear and confusion rather than technical intrusion.

For wallet providers, the episode highlights the importance of layered security controls across email, support, and customer-notification systems. For users, it reinforces a basic rule of crypto custody: recovery phrases should never be shared in response to unsolicited messages, regardless of how credible the sender appears.

The broader market impact is likely limited in the near term, but the event may briefly lift attention on security-sensitive names across the hardware wallet sector. It also arrives during a period of elevated risk appetite, with the Fear and Greed Index at 66, suggesting traders may be more willing to discount isolated security incidents unless they point to systemic exposure.