Trezor issued a security notice following a January 17 data compromise using their third-party support ticketing platform.
The popular hardware bitcoin wallet provider says the investigation is continuing but has discovered no indication that customers' digital funds were hacked.
"We want to stress that none of our users' funds have been compromised through this incident," says the note. "Your Trezor device remains as secure today, as it was yesterday," it said.
Approximately 66,000 Trezor Support users since December 2021 may have had their identities, usernames, and email addresses exposed to unauthorized parties.
The hacked system also held postal addresses, phone numbers, and other personally identifying information, although Trezor does not think these were affected.
Sadly, Trezor has documented 41 examples of exposed data being abused, with attackers attempting to deceive users into handing out their recovery seeds, a string of words that hold all the wallet access information.
The attackers email Trezor customers a "automated reply" from support asking them to provide their 24-word wallet setup phrase.
The phishing mail claims the seed information is only needed for firmware certification and won't be "accessible by humans."
Giving out a Trezor seed phrase would enable the attacker to recover the victim's wallet on any DIP39-compatible hardware wallet device and steal bitcoin irreversibly.
Trezor warned all impacted users of phishing efforts for recovery seeds. No successful assaults have been reported by the firm.
The business claims illegal access to its support system was ended and the attack risk reduced on January 17 at 20:20 CET.
If you contacted Trezor support after December 2021, beware of phishing and scams.
Hardware wallet users must never reveal their seed phrase. Only the user should have access to this personal information.
Wallet providers will never seek this sensitive data since it is not needed for operations or support.
Important Notice:Searching for stuff takes hours, and I attempt to tell people strictly. Due to this year's halving. Everyone should be affluent throughout the halving time. So please help me with the reference link I'll provide.
Crypto.com: https://crypto.com/app/gyhxw9j7h3 to sign up for Crypto.com and we both get $25 USD :)