DATABASES Signal 414
Data breaches at Trezor and SafePal shipping partners expose customers’ addresses, raising risk of physical wallet attacks
↗
Recent breaches at the shipping firms used by Trezor and SafePal leaked customers’ names, addresses, emails and phone numbers, making hardware wallet owners vulnerable to real-world “wrench” attacks.
Engineers building crypto-related services must treat supply-chain data as a critical attack surface, not just the cryptographic device. The exposure of personal shipping details enables criminals to locate high-net-worth owners and attempt forceful extraction of seed phrases, a threat that bypasses traditional software security controls.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Shipping partners of Trezor and SafePal suffered data breaches that released personal shipping information of thousands of hardware wallet customers.
The breaches do not compromise the offline cryptographic security of the wallets but enable physical attacks that aim to coerce owners into revealing seed phrases.
Both manufacturers warned of heightened phishing and “wrench” attacks, urging customers to adopt additional vigilance and consider tighter data-handling practices.
THE CLUSTER