Trezor support site breach exposes personal data of 66,000 customers

Trezor disclosed a breach of its third-party support ticketing portal on January 17 that exposed names, usernames, and email addresses for approximately 66,000 users who contacted support since December 2021; attackers have leveraged the exposed data in phishing emails requesting 24-word recovery seeds (41 exploitation cases confirmed). Trezor states no user funds were observed stolen, the unauthorized access has been terminated, and affected users were warned to never disclose their seed phrases.