67,000 More Trezor Customers Exposed as Data Breach Widens

The security perimeter surrounding hardware wallet maker Trezor continues to erode as a secondary analysis of a recent data breach reveals that an additional 67,000 users have been compromised. The expansion brings the total scope of affected customers significantly higher, but the critical failure lies deeper than mere numbers. Forensic evidence demonstrates that the leaked records include customer data dating as far back as 2019—a revelation that directly undermines the company’s long-standing assurances regarding third-party data governance. For years, Trezor maintained that its external service providers adhered to a strict 90-day data retention policy designed precisely to limit the fallout of potential infrastructure breaches. The presence of five-year-old contact information and interaction logs suggests a major failure in vendor oversight, exposing a persistent gap between corporate privacy pledges and actual data lifecycle management. When third-party platforms retain user logs indefinitely without enforcement from the primary vendor, the security guarantees of the core product become effectively decoupled from the administrative ecosystem supporting it. The implications for affected users extend far beyond standard email spam. Hardware wallets are marketed on the fundamental premise of absolute isolation from online threats, catering specifically to individuals managing high-value digital asset portfolios. By exposing names, email addresses, and customer support histories, the breach hands malicious actors a targeted blueprint for sophisticated phishing operations. Attackers historically leverage these leaks to execute high-conviction social engineering schemes, ranging from malicious firmware update prompts to targeted SIM-swapping and physical home-invasion threats. The central irony remains stark: while the cryptographic private keys stored on Trezor hardware remain secure, the human layer surrounding them has been systematically compromised. This widening incident highlights a systemic vulnerability within the cryptocurrency sector: the reliance on conventional enterprise software for customer relations and support. Hardware wallet manufacturers excel at cryptographic engineering, yet they frequently fall victim to the standard software-as-a-service attack vectors that plague traditional corporations. Similar historic leaks across the cold-storage industry demonstrate that customer relationship management platforms are increasingly becoming the path of least resistance for threat actors seeking to deanonymize crypto holders. As hardware security firms grapple with the operational fallout, the Trezor breach serves as a critical case study on the limits of outsourced operational security. Rebuilding customer confidence will require more than technical post-mortems; it demands a fundamental restructuring of vendor accountability and data minimization practices. Hardware providers must treat customer metadata with the same rigor as on-chain private keys, recognizing that in the context of self-custody, identity protection and asset security are fundamentally inseparable.