BTC price on August 14, 4PM UTC

Trezor Breach Raises Phishing Risk, Not Wallet Security Threat

Phishing risk and eroded hardware-wallet trust add a modest near-term sentiment headwind to Bitcoin price heading into the August 14 settlement.

• 13,689 Trezor customers exposed via ShipMonk logistics hack

  Trezor confirmed on August 10 that shipping partner ShipMonk suffered unauthorized access via a Metabase SQL injection zero-day, leaking names, emails, phone numbers, and addresses for 11,742 customers in full and 1,947 more partially. The breach spans buyers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal.

• Trezor warns exposed users face targeted phishing and social-engineering attacks

  Trezor acknowledged that while its own systems remain secure, attackers can use the leaked data to impersonate banks, exchanges, or Trezor itself to extract wallet recovery seeds. Past breaches of this kind — including Trezor's own January 2024 ticketing portal leak — have been followed by active phishing campaigns.

• Second third-party breach in eight months erodes trust in Trezor supply chain

  A January 2024 breach of Trezor's support portal exposed 66,000 users and led to direct phishing attacks. This second supply-chain incident within eight months deepens reputational risk for hardware wallet adoption, a sentiment headwind for Bitcoin's self-custody narrative.