Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider

Trezor warns customers that a Brevo breach allowed attackers to send roughly 347,000 phishing emails impersonating Trezor; the malicious link installs an app that requests users' wallet backup passwords, enabling irreversible theft of funds. The report also notes a recent ShipMonk breach that exposed names, emails, phone numbers, and postal addresses for ~81,000 buyers, increasing the risk of targeted phishing and physical coercion attacks; Trezor says its products and account systems were not directly compromised but is re-evaluating vendor relationships.