Trezor Marketing Platform Breach Exposes 347,000 Users to Phishing

Trezor reported that its third-party marketing platform, Brevo, suffered a data breach, allowing attackers to send phishing emails to 347,000 customers. The attackers used Trezor's domain to distribute malicious links designed to steal wallet recovery phrases. While Trezor disabled the domain within 20 minutes, approximately 2,500 users clicked the links. The company suspended its Brevo account and confirmed that its core systems remain secure.