Trezor Data Breach Expands, Affecting 67,000 Additional Customers

Trezor’s data breach has widened to include records linked to 67,000 more customers, according to Decrypt. Some of the exposed information dates back to 2019, extending well beyond the 90-day retention period that Trezor said its partners had agreed to follow. The disclosure adds to scrutiny of how customer records were stored and retained in connection with the hardware wallet provider. The available information does not specify which records were affected or what customer information they contained. Trezor has previously said its partners had agreed to delete or retain relevant data for no more than 90 days, but the records identified in the breach appear to have remained available for years longer. The development is relevant to crypto-market participants monitoring operational and cybersecurity risks surrounding digital-asset service providers and wallet companies.