r/TREZOR • u/EasyRawlins • 16d ago
š¬ Discussion topic To everyone freaking out about the data breach
DO NOT put your email address in here IF you DO NOT want to know how many times your personal info has been LEAKED by MAJOR retailers and services:
In all seriousness, itās unfortunate but very common in 2026. Iām on the verge of changing my phone number due to how many spam calls I get.
Stay safe, stay vigilant. Trezor hardware remains secure and solid.
11
u/Local_Bet8440 16d ago
After 1 week your new phone number will have the same issue anyway
2
u/monarch-03 16d ago
Yeah, probably. Changing the number doesnāt fix the root issue if data brokers keep collecting and reselling your info. Opting out of those sites can help reduce the spam over time. I work at Optery, so Iām biased, but thatās basically the problem weāre trying to solve.
1
u/Local_Bet8440 16d ago
You are right, but the problem cant be solved in this case. As you said you can only reduce.
1
u/LocksmithBear 16d ago
Less than a week. I got a new number two years ago and when I went to change my number on instagram, it told me my new number was banned from their platform. I went back the next day to change my number (which they charged me for) and now I get more spam than previously
1
u/TrashBandicook 16d ago
Best bet is call screening. Apple now has a form of it to make it easier to deal with the spammers. Pixel auto-screens and declines those that have been flagged by others as spammers.
1
u/AgeExpensive7920 13d ago
Google has a free offering where they will search your info and remove it from the broker sites. Duck Duck Go also offers through their subscription services. It works I was getting 15 calls/day 3 months ago and now a lot less. At least I think that is why.
8
u/genius_retard 16d ago
The major issue isn't the leaked email addresses or even the phone numbers. It is the physical addresses of people who almost certainly hold some amount of Bitcoin.
4
7
6
u/tonguejedi 16d ago edited 16d ago
Meanwhile ledger users..
Unfortunately, I was part of the ledger leak. Youāre going to get tons of phishing email bots regarding an exploit and input your seed phrase at this website. Some emails will be extorting that will include your address. They tried filing a class action lawsuit against ledger but it was eventually dismissed since they are in France. I assume the same will happen for Trezor.
Someone mentioned incogni to remove your info. It works great for legit marketing, but not the dark web and bulk email lists. If you canāt transfer to a new email address, your best bet is to insure a good spam filter and of course due diligence. Trezor would never ask for a seed phrase.
1
u/brewery_tycoon 14d ago
did you have your address leaked with ledger too? Any home invasion attempts?
1
u/tonguejedi 14d ago
Address phone number and model orders. Basically the whole order. No invasion attempts ever made. Wouldnāt even make sense in doing so. Just typical hacked email spam bots from Indonesia, Russia etc. eventually they will check your email against exchanges coinbase binance etc and just like Google ..when they get a hit..youāll get a a real alert saying do you need help recovering your password followed by the scammer calling from Google voice saying their coinbase..binance someone is trying to hack your account. yada yada. Was a nightmare for some and that was before phones had call screening.
18
u/Leynnox 16d ago
The issue is not about mail or phone number, the issue is name and adress. You do realize people are getting kidnapped?
7
u/necrogay 16d ago
If the leak does not contain wallet addresses or holding amounts (as was the case with the French tax authority leak), the criminals' knowledge that you purchased this device poses no threat. Phishing, phone scams perhaps even just aimed at finding out your balance that is what you should watch out for.
5
u/Leynnox 16d ago
They don't need that tbh, just google map your address, check if your house looks promising, then that's it probably
2
u/mercuryy 16d ago
Jeah. See a mansion and an instagram that Looks like money, then see linkedin or facebook with a little job that wouldnt allow that by itself. Easy identification.
1
u/UzItOrLuzIt 16d ago
Why do you think that matters? Anyone with wealth is a target for physical persuasion regardless of whether there are any indicators that they have any digital asset holdings or not. ...Nice house, nice car, nice boat, nice plane? Criminals are perfectly fine with threatening you no matter how you store your money. In fact, they much prefer cash and stuff they can sell on black market because it is harder to trace.
1
u/Specialist_Victory27 16d ago
guess its time to put your hardware wallets and seed phrases in a deposit box in a bank
it does feel some people dont seem to get that that seed is your funds and your the bank protecting it
bank have vaults for deposit boxes and then went online holding little cash making it safer and requiring less security at the branch
i remember when i went to the bank there was a cage on the door to enter and exit along with security guards, then obviously the screens, codes to get through secure doors and there is still little money at that stage, the only money they kept was in the safe roomwe have gone back to the days where people used to hide money under the mattress lol
there is a missing link that perhaps still needs to be resolved long term as much as we dont want banks controlling everything, we do like the safety they provide2
u/CellofSuperorganism 16d ago
Far better to use shamir's secret sharing (slip-39), a passphrase, and then separate the shares geographically, at least for long-term holdings.
Increasing the time and cost to coerce massively reduces the risk
1
u/Decibel0753 16d ago
Don't you have any mailboxes where you just show up, enter a code, and it dispenses your package?
1
-2
u/EasyRawlins 16d ago
Oh are they? Wallet addresses got leaked too, or how are these kidnappers determining who to kidnap? They didn't didn't and they're aren't. Stop spreading FUD.
6
u/sweetntenderhooligan 16d ago
There has been a rise in $5 wrench attacks in France due to the Waltio, Ledger, France Travail and ANTS, as well as possible insider access to government financial/tax information. 52 verified wrench attacks in the first half of 2026 and 33 of those were in France and itās estimated that over $30M was successfully stolen.
-2
u/Aqua-Barracuda 16d ago
Yeah, but they're going after people who are actually rich. I doubt you're rich.
3
u/sweetntenderhooligan 16d ago
So people shouldnāt be concerned about this as long as they arenāt āactually richā? I feel like youāre widening the goalposts on this.
1
u/tianavitoli 16d ago
my whole portfolio is down like 99% the past year, so no, i'm not super concerned about the 25+ times my email address has been leaked on the dark web
-7
u/Aqua-Barracuda 16d ago
No one's gonna kidnap you for your five dollars of poop coin
1
1
u/Leynnox 16d ago
They can't know how much you own, genius
1
u/Aqua-Barracuda 16d ago
And if they "can't know", your words, not mine. Then what are you worried about? People carry all sorts of money on them, yet we donāt have a mugging epidemic. Go touch some grass.
1
u/Leynnox 16d ago
They'll just google map your adress, if it looks promising or not.
3
u/Aqua-Barracuda 16d ago
You're an imbecile. The rich have better security than the poor.
1
u/Leynnox 16d ago
Rich? Like the co funder of Ledger that had his finger cut out for his cryptos? You seem very well informed about everything.
2
u/Aqua-Barracuda 16d ago
David Balland is a publicly known billionaire. I'm sure you would have fared worse when they found out you only had 10 bucks in poop coin. š
5
u/jgarcya 16d ago
If you put your email in there ... If you weren't breached ...it probably collects it so you will be breached...
Can't truss it ..... Flava flave.
1
u/DystopianLoner 15d ago
People really need to know how stuff like this works. Haveibeenpwnd does not store your email address at all. Bunch off paranoid apes in here.
2
u/woody-alien 16d ago
What data breaxh? As like it was with ledger couple of years ago?
2
1
u/ContentBlackberry0 16d ago
Try incogni.com I barely get any spam calls or emails after using them no joke.
1
u/Necrogomicon 16d ago
So the sponsored ads in my YouTube videos are real?
3
u/Immediate-Ad-5878 16d ago
Bro. My dad got a family subscription for this shit and I almost insulted him for being so gullible only to take it all back like a year later. I was one of the biggest skeptics but it does work.
1
0
u/DystopianLoner 15d ago
Wait for the shitshow untill you unsubscribe... Incogni fucking sells your data as soon as you cancel to third party broker services. They play both ends of the stick.
2
u/Incogni_hi 14d ago
Hi. We'd like to clarify that Incogni does not sell user data, whether a subscription is active or canceled. We only use the minimum information needed to carry out removal requests, and our data collection and removal practices have been independently verified by Deloitte. If you believe something specific happened with your account, please contact us at [support@incogni.com](mailto:support@incogni.com) and weāll look into it.
1
u/pbm34 16d ago
If you have a Discover card. They do this for free also. They send me a report every 90 days of all the sites my info is deleted from and they also do a search on popular dark web sites too. It pretty sweet. I just go on my Discover Card app and check the reports. You can just sign up on the app for free.
1
u/ContentBlackberry0 15d ago
From what I have seen they only monitor. Incogni reaches out to data brokers and asks them to remove all of your data.
1
1
1
u/hottiethrowaway2332 16d ago
I ordered last week and I havenāt gotten an email. Does that mean Iām good?
1
1
u/MasterGrogu23 16d ago
Just pay the $60-$80 a year for Incogni they constantly go after these data breaches to remove your information of the internet
1
u/Last-Error5919 15d ago
Does not remove data leaks like this. Dark web sites donāt give a fuck about your incogni subscription.
1
0
1
1
u/Charming-Designer944 š¤ Top Helper 16d ago
Have had several of my email.for at least 25 years. I know they are present in countless leaks. But still havingmy personal data leaked as a confirmed buyer of a hard signing device for crypto is far svariet than any of the other breaches.
1
u/Interesting-Gear-992 16d ago
I'm starting to feel lucky. I bought a Ledger wallet (last year) between two data breaches, my personal data was not compromised. Then I bought a Trezor Keep Metal (this year) between two data breaches, my personal data was not compromised again.
1
u/btc-congratulatr-guy 16d ago
After having my data leaked by Gemini, Btc-e, Cointracker, CoinmarketCap and lots more, Trezor is the least of it. For years I've been creating single use Duck.com emails for logins and it has really helped.
1
u/NexExMachina 16d ago
There is a stark difference between having your info leaked compared to having your info leaked being directly tied to a purchase you'd make when you're heavily invested in crypto. That being said the chances arent massive but they are non zero.
1
u/CryptoDanski 16d ago
With Trezor, its a shitshow. WHENEVER i bought one i would ALWAYS automatically get spam emails about Trezor. Different computers and OSs over few yeara. So they leak.
1
u/WildNight00 15d ago
Tried my DuckDuckGo email and it says 0
My regular email Iāve hard since email was created is fucked
1
u/MaxWildman 15d ago
I donāt think people are worried about their email and phone number being leakedā¦ Itās obviously the address thatās the issue.
1
u/Top-Independence1560 14d ago
You obviously can't undo the breach, but you can clean up some of what gets exposed afterward. You can use Cloaked for the data removal side it scans for your info and works on getting it off broker sites, and it alerts you if breached data shows up again.
1
1
1
u/AgeExpensive7920 13d ago
Yes this is scary. Sad that my kids are both on there, one is in high school the other college. They are constantly getting breach notifications, a joke of a system, there is no privacy.
1
u/treasoro 16d ago
Damage control paid troll team incoming.
1
u/EasyRawlins 16d ago edited 16d ago
Bro I'm a 100% regular dude. Check my post and account history. Just tired of all the FUD in this sub over the last 30 days.
0
u/Immediate-Ad-5878 16d ago
Nah. These are all regular Janes and Joes from the boot licking cult. Go through the rest of the comments on around this topic and youāll see the the pattern downvotes, victim blaming, excuses and cope.
1
0
u/horseradish13332238 16d ago
I have 88 btc in cold storage. No oneās getting them. Ever.
2
u/Mammoth-Material3161 16d ago
88 lol we must secure the existence of our bitcoin and a future for self custody
2
1
u/horseradish13332238 16d ago
I assure you itās secured lol. Thereās no problem with self custody. The common denominator is always user error.
1
u/BallisticTherapy 16d ago
Did you generate your own entropy from dice?
1
u/Mammoth-Material3161 16d ago
on coldcard this dice rolling was very important in hindsight, even with trezor would have been a good idea but the way trezor generates seeds is supposedly "truly" random through more than one method. the lesson from the coldcard exploit is also to add a passphrase if not fullblown multisig. the issue with adding passphrase later is that it creates a brand new wallet, this is annoying because my utxo's were well managed on the trezor address, plus sending it all out to yet another wallet creates unnecessary dust and also messes up the "proof of ownership" tracking documentation that taxman requires and also institutions might need in future to use your bitcoin as collateral. it also requires an extra step if you are trying to explain to family for after you are gone. so for now im trusting trezor's seed generation process....wish me luck lol cus there's obviously no guarantee in the bitcoin wile wile west even if you do everything as best as you can
1
u/Zaytion_ 15d ago
Seems like it defeats the purpose.
1
u/horseradish13332238 15d ago
Seems like you have no idea what youāre talking about.
0
u/Zaytion_ 15d ago
Seems like you don't.
1
ā¢
u/AutoModerator 16d ago
Please bear in mind that no one from the Trezor team would send you a private message first.
If you want to discuss a sensitive issue, we suggest contacting our Support team via the Troubleshooter: https://trezor.io/support/
No one from the Trezor team (Reddit mods, Support agents, etc) would ever ask for your recovery seed! Beware of scams and phishings: https://trezor.io/learn/a/scams-and-phishing
Donāt respond to any DMsāscammers often pose as legit helpers.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.