Trezor Says Hackers Breached Its Email Provider

The breach is at a third-party email vendor, not the wallet itself, which is the detail that matters: the hardware's security model is untouched, but the trust channel Trezor uses to reach users is not. That distinction is cold comfort for holders, since a convincing seed-phrase warning targets the one thing a hardware wallet cannot protect — a user who types the phrase somewhere. The open question is whether this stays an isolated phishing incident or signals a broader pattern of attackers treating wallet makers' communications vendors as the soft entry point.