Trezor Reports Email Provider Breach Behind Fake Security Alert

Hardware wallet maker Trezor said hackers breached its email provider and used the incident to circulate a fake security alert. According to the company, the message claimed that a hardware flaw could expose users’ recovery phrases. Recovery phrases are critical credentials used to restore access to crypto wallets, making such warnings particularly sensitive for users holding digital assets, including Bitcoin. Trezor’s disclosure links the fraudulent communication to a compromise at its email service provider. The supplied information does not indicate that the company’s hardware was affected or that recovery phrases were exposed. It also does not provide details on the number of users contacted, the provider involved, or any impact on customer funds. The report was published by Decrypt on September 9, 2026. Market participants tracking BTC and the broader crypto sector may monitor further updates from Trezor regarding the breach and the authenticity of related security communications.