'Fraudulent Letters'—Trezor, SafePal Warning As 53,487 Owners Exposed

"Scammers can use the leaked information to send fake emails, make fake phone calls, send fraudulent letters, or potentially impersonate banks, crypto exchanges, or even Trezor," the hardware wallet manufacturer warned customers on Aug. 13, disclosing a breach at one of its shipping providers.

"SafePal leaked 39,798 users today. not keys - names, emails, addresses," the analyst who posts as @dealerdefi wrote on X three days later. "your keys aren't the weak point, you are."

"To be clear, our systems were not compromised, and your Trezor device is secure," Trezor said, putting the exposure at 11,742 customers whose addresses leaked, plus 1,947 partly affected.

"We have some difficult news to share," the company wrote on X the same day, naming seven affected countries and orders placed between May 10 and Aug. 8.

ShipMonk "has also received extortion emails from the ShinyHunters extortion gang," BleepingComputer reported, tracing the intrusion to a critical SQL injection zero-day in Metabase.

'An isolated case at the time'

SafePal disclosed its own breach on Aug. 16, saying it got a first report in early May but "treated it as an isolated case at the time," opening a full review only in July.