The company behind the crypto hardware wallet Trezor says some of its customers are at risk of phishing attacks following a security incident that leaked their data.
SatoshiLabs says that on January 17th, there was unauthorized access to a third-party support ticketing portal that Trezor uses.
The incident exposed the contact details of up to 66,000 customers who have interacted with Trezor Support since December 2021, the firm says.
The company also says the compromised information was limited to names and emails and did not include postal addresses or phone numbers.
SatoshiLabs assures its users that their assets are safe, but says it is taking precautionary measures since the perpetrators may use the illegally accessed information for malicious purposes.
“We are providing you with this information proactively out of an abundance of caution and our commitment to transparency. The potential exposure of email addresses might be harmful in the fact that the emails can be subject to phishing attempts.”
An investigation revealed that the hackers already contacted 41 customers by email and requested sensitive information related to their recovery phrases.
SatoshiLabs says eight other people with accounts on a trial discussion platform hosted by the same third-party vendor may have also had their details compromised.
“We always advise users to stay vigilant given the increased sophistication of phishing attempts. We remind users that no legitimate representative of Trezor will ever ask a user for their seed. Please NEVER share your recovery seed with anyone.”
SatoshiLabs says it has already sent emails to those affected by the incident.
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inboxFeatured Image: Shutterstock/Bruce Rolff/Natalia Siiatovskaia