Trezor Warns of Phishing Campaign Targeting 347,000 Users After Brevo Breach

Trezor, a leading cryptocurrency hardware wallet manufacturer, revealed that threat actors leveraged a breach at Brevo, its email marketing platform, to conduct phishing campaigns targeting its customers. According to the disclosure published on September 11, 2026, the attackers obtained approximately 347,000 email addresses and sent phishing emails containing malicious links. Of those targeted, 2,500 users clicked the link, potentially exposing credentials or enabling unauthorized access to cryptocurrency wallets.

The company stated that the phishing attacks occurred earlier this week, with the breach at Brevo serving as the source of the exposed email addresses. Trezor emphasized that no direct compromise of its hardware wallets or firmware was involved, but the phishing emails posed a significant risk of credential theft and social engineering attacks aimed at gaining access to users' digital assets.

Trezor advised affected and potentially affected users to treat any unsolicited communications with extreme caution, avoid clicking links or downloading attachments from unknown sources, and ensure that two-factor authentication is enabled on all associated accounts. The company also recommended verifying all communications exclusively through official Trezor channels. As of the disclosure, Trezor had not reported any confirmed cases of financial loss directly attributable to the phishing campaign, though the full extent of any compromise remains under investigation.