'Fraudulent Letters'—Trezor, SafePal Warning As 53,487 Owners Exposed
FORBES ·
Hardware wallet makers Trezor and SafePal recently disclosed significant data breaches, exposing over 53,000 customer records including names, emails, and addresses. Trezor's leak stemmed from shipping provider ShipMonk, targeted by ShinyHunters via a Metabase SQL injection. SafePal's breach involved an authorization flaw in an order-tracking plug-in. These incidents heighten fears of physical attacks and social engineering, as attackers leverage personal data for home invasions and kidnappings, a trend Chainalysis notes is rising. Past breaches, like Ledger's, led to extortion and even a co-founder's kidnapping, underscoring the severe risks. Experts warn that such data makes crypto holders "moving targets," emphasizing vigilance against scams and never sharing recovery phrases. "Scammers can use the leaked information to send fake emails, make fake phone calls, send fraudulent letters, or potentially impersonate banks, crypto exchanges, or even Trezor," the hardware wallet manufacturer warned customers on Aug. 13, disclosing a breach at one of its shipping providers. "SafePal leaked 39,798 users today. not keys - names, emails, addresses," the analyst who posts as @dealerdefi wrote on X three days later. "your keys aren't the weak point, you are." "To be clear, our systems were not compromised, and your Trezor device is secure," Trezor said, putting the exposure at 11,742 customers whose addresses leaked, plus 1,947 partly affected. "We have some difficult news to share," the company wrote on X the same day, naming seven affected countries and orders placed between May 10 and Aug. 8. ShipMonk "has also received extortion emails from the ShinyHunters extortion gang," BleepingComputer reported, tracing the intrusion to a critical SQL injection zero-day in Metabase. SafePal disclosed its own breach on Aug. 16, saying it got a first report in early May but "treated it as an isolated case at the time," opening a full review only in July. An authorization flaw in an order-tracking plug-in exposed roughly 39,798 customers of the Binance-backed wallet maker, putting 53,487 wallet buyers into circulation across the two disclosures in four days. "No evidence has been found that the incident itself compromised access to SafePal wallets or funds," SafePal said. "So you think about like attackers, what are they? They're organizations, right? They have their own KPIs, they have their own goals, they go to an office, they have a strategy and they say okay this is a project and they calculate the ROI," Ido Sofer, founder of the key-management firm Sodot, said on the On The Margin podcast. "If I put enough constraints and enough like security rails and in-depth security, so the cost is gonna be higher than my neighbor and the other company," Sofer said. "So probably they're gonna go there because the ROI is lower." A leaked list of names and delivery addresses moves that calculation the other way. "Home invasions now account for 37% of incidents in 2026," Chainalysis wrote in an Aug. 6 report, up from 26% in 2023, counting 46 violent crypto-related incidents through late June, a pattern that also ran through this year's largest crypto thefts . A French tax official near Paris "is alleged to have stolen and sold dossiers on high-net-worth crypto holders, which included their names, addresses, holdings, phone numbers, and tax records," Chainalysis wrote of a 2024 case. The crypto tax-reporting firm Waltio "disclosed a separate breach of some 50,000 users, creating yet more useful data for attackers." Attacks in France ran at "roughly 4.6 per month in the first half of 2026," Chainalysis wrote, counting 30 publicly known incidents there against more than 70 in the tally of Interior Minister Laurent Nuñez. Four of the seven countries in the Trezor leak are European. "The more assets you put in a centralized custodian, the larger the honeypot and larger the ROI from social engineering, physical engineering, digital engineering," Michael Tanguma, chief executive of the bitcoin custody firm Onramp, said in an interview. "There's a single point of failure whether it's Coinbase or yourself." "All this stuff, the violent attacks, third party attacks," Tanguma said, arguing after a $130 million Coldcard hack that self-custody is "increasingly going to be untenable" for most holders. "And why? Because it's a moving target." Ledger went through this in January, when its international e-commerce partner Global-e was breached. "Global-e does not have access to your 24 words, blockchain balance, or any secrets related to digital assets," Ledger said at the time. "This data breach has no link nor impact on our hardware wallets, the app or your funds. Your crypto assets are safe," Ledger said in 2020, after a breach exposed 272,000 records including names, phone numbers and addresses. Victims got extortion letters demanding $700 to $1,000 in bitcoin under threat of doxxing. "You should be suspicious of receiving a free product in the mail that you didn't order," Ledger security chief Matt Johnson said in 2021, after others were mailed counterfeit Nano devices containing soldered flash drives that asked for the 24-word recovery phrase. Ledger co-founder David Balland was later kidnapped for ransom in France . "Be suspicious of any communication that prompts immediate action or asks for personal information," Trezor told exposed customers. "Never enter your wallet backup on a website or share it with anyone."
AI 시장 분석
Customer personal information leaks totaling 53,487 users occurred at hardware wallet manufacturers Trezor and SafePal. This incident was caused by a third-party partner's SQL injection vulnerability and a flaw in an order tracking plugin, rapidly increasing the risk of physical attacks and social engineering scams targeting cryptocurrency holders. Investors must maintain strict security and pay special attention to privacy protection.
하락 영향
- Bitcoin — Concerns over physical attacks and hacking are growing due to hardware wallet security vulnerabilities and customer data leaks, which dampen investment sentiment and act as short-term downward price pressure.
- Cryptocurrency — Increased risks of scams and robberies resulting from massive data leaks at major wallet providers like Trezor and SafePal undermine the security credibility of the entire industry.
DYAX 전담 분석
Due to the customer data breaches at Trezor and SafePal, the names, emails, and shipping addresses of over 50,000 users fell into the hands of hackers. As pointed out in the Chainalysis report, this increases the likelihood of practical offline crimes such as physical break-ins and robberies, negatively impacting trust across the cryptocurrency ecosystem.
Going forward, increased security reinforcement costs for hardware wallet manufacturers and user churn could slow market growth, and investors must closely monitor indicators related to phishing attacks and personal safety.
AI가 생성한 분석으로 투자 자문이 아닙니다.
DYAX Investor Sentiment
Bullish (Long) 40% · Bearish (Short) 60%
270 participants
Related News
- JPMorgan cut Polymarket as banking client over regulatory concerns
- Intel's $23 Billion Raise May Signal Foundry Progress
- Oracle Plans More Layoffs as AI Spending Surges
- 4 Very Well-Known High-Yielding Stocks to Load the Boat on Now (2 Yield Over 6%)
- IBM Makes Surprise Move in Nvidia AI Race
- U.S. EV market shows signs of bottoming out: Bernstein
