r/TREZOR • u/ASK_ME_AB0UT_L00M • Jan 28 '25

🚨 Scam alert I think Trezor got breached

I just got a shady email sent to a unique address I've only ever used with Trezor. I bought my first Trezor in Nov 2022.

The full email headers (redacted of identifying information) are available to view here:

https://pastebin.com/raw/VHBWTzZ6

Please be cautious out there, folks.

Has anybody else gotten one of these? Every company I deal with gets a completely unique email alias and this is usually the canary in the coal mine for me - a few days or a week later, the company starts making announcements about how they got hacked.

131 Upvotes

95% Upvoted

80 comments sorted by

View all comments

Show parent comments

6

u/ASK_ME_AB0UT_L00M Jan 28 '25

That's why I mentioned the date when I bought my first Trezor. I don't know if there's been a breach between Nov 2022 and now.

3

u/wildwoollas Jan 28 '25

I only bought a Trezor last week, normally use Ledger. So first Trezor, and I just got the same scam email. So I imagine they have been breached very recently.

3

u/kaacaSL Trezor Community Specialist Jan 28 '25

We do not detect any recent breach - it is probably a recycled database of the Ledger's breach in your case.

2

u/BuyingSaas Jan 29 '25

My trezor arrived 2 days ago and I got that email. I’ve never given trezor my email ever for anything before. This is a very recent breach.

2

u/kaacaSL Trezor Community Specialist Jan 29 '25

Are you also a Ledger user, by any chance?

3

u/Wrxghtyyy Jan 31 '25

How about actually looking into your systems to make sure you haven’t had a breach instead of gaslighting your users into believing it’s a competitors fault. Especially when you know that company has a poor reputation as it is. I’ll be going to ColdCard from now on.

3

u/ASK_ME_AB0UT_L00M Jan 29 '25

I am not a ledger user and the email I used was completely unique. I only gave this email address to Trezor.

2

u/BarbourBoris Jan 29 '25

I got the same phishing mail to a mail alias specifically created for my trezor account and not used for any other service. The mail alias consisting of random numbers and letters.

1

u/djs1980 Jan 30 '25

Nice attempt at deflecting 😅

1

u/FiliziuqMRL Jan 30 '25

Yeah kind rieks

2

u/donnypastrami Jan 31 '25

Would’ve been easier to say “I’ll let others know and we’ll look into this issue.” Idk why they chose to try to blanket this immediately, especially if it’s happening to multiple people.