Altcoins Talks - Cryptocurrency Forum

Cryptocurrency Ecosystem => Crypto Wallets => Topic started by: paid2 on January 25, 2024, 02:18:05 AM

Title: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on January 25, 2024, 02:18:05 AM
It's just to spread the word: be careful, verify the emails and links you receive if you're using a Trezor, there's been a leak from their database recently.   
   
Article for reference: https://www.bleepingcomputer.com/news/security/trezor-support-site-breach-exposes-personal-data-of-66-000-customers/
Official announcement: https://blog.trezor.io/trezor-security-update-stay-vigilant-against-potential-phishing-attack-bb05015a21f8 (https://blog.trezor.io/trezor-security-update-stay-vigilant-against-potential-phishing-attack-bb05015a21f8)
(https://www.talkimg.com/images/2024/01/25/ktS3j.png)
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: joniboini on January 25, 2024, 08:27:22 AM
Do they name this third-party provider or not? I saw speculation that it was Mailerlite or something, but it was not confirmed. If they plan to move on or stop using that provider, is there any reason they don't publish the name? That should allow people to be more alert if anyone receives suspicious e-mails from the same e-mail service. Understandably, they use a third-party provider for their support channel, but storing users' data for years does not sound great. Maybe they can move it offline or something else instead of relying on a third-party provider to secure them. CMIIW.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Charles-Tim on January 26, 2024, 10:41:53 AM
Do they name this third-party provider or not? I saw speculation that it was Mailerlite or something, but it was not confirmed. If they plan to move on or stop using that provider, is there any reason they don't publish the name? That should allow people to be more alert if anyone receives suspicious e-mails from the same e-mail service. Understandably, they use a third-party provider for their support channel, but storing users' data for years does not sound great. Maybe they can move it offline or something else instead of relying on a third-party provider to secure them. CMIIW.
We do not care about the third party than Trezor was unable to securely save their customers information and we have Trezor to blame. This is not the first time that Trezor customers information were breached for hackers to use the information in phishing attack. All that I know is that those that subscribed to Trezor news letter with their email were affected.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Zed0X on January 26, 2024, 12:26:16 PM
Do they name this third-party provider or not? I saw speculation that it was Mailerlite or something, but it was not confirmed. If they plan to move on or stop using that provider, is there any reason they don't publish the name?
It makes you wonder if there was an agreement not to disclosed their name since they were able to point out Mailchimp back in 2022 for a similar breach. Maybe because they haven't finalized their investigation yet?
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: notblox1 on January 27, 2024, 12:12:17 AM
It's just to spread the word: be careful, verify the emails and links you receive if you're using a Trezor, there's been a leak from their database recently.   
I hope nobody lost coins or send anything to scammers, but Trezor should get your shit together !
How many times we need to hear the same story about hacked database from hardware wallets and information form customers until you learn to protect it correctly >:(
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on January 27, 2024, 12:26:37 AM
I hope nobody lost coins or send anything to scammers, but Trezor should get your shit together !
How many times we need to hear the same story about hacked database from hardware wallets and information form customers until you learn to protect it correctly >:(
You're absolutely right. What's more, we learn that it was customer support that had its data stolen... They really must keep their support cases for a very long time, because I imagine that for Trezor 66,000 cases means several years of support.

Maybe this kind of repeated incidents will push users to consider other solutions like an airgapped electrum etc...
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: robelneo on January 27, 2024, 04:10:06 PM
It's good to know that no users' funds have been compromised or else that would be the end of Trezor wallet there are thousands of users of this hardware wallet, and it can create a negative impact on the hardware wallet industry.
"We want to stress that none of our users' funds have been compromised through this incident," reads the announcement. "Your Trezor device remains as secure today, as it was yesterday," the company added.
The hackers and scammers will keep on trying to create a breach so people in every industry that is involved in securing coins should keep upgrading to combat these hackers and scammers, and users should continue to learn and educate themselves on how to secure their account and their investment.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Yamane_Keto on January 29, 2024, 06:58:01 AM
I hope nobody lost coins or send anything to scammers, but Trezor should get your shit together !
How many times we need to hear the same story about hacked database from hardware wallets and information form customers until you learn to protect it correctly >:(
I think that the database that was hacked is for support and belongs to a third party, so Trezor must improve the choice of third parties with whom it shares data or not.
Repeating such a scam makes anyone check the email several times before clicking on it and be careful not to share his email publicly or not to use aliases.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on January 29, 2024, 11:53:31 AM
I think that the database that was hacked is for support and belongs to a third party, so Trezor must improve the choice of third parties with whom it shares data or not.
Repeating such a scam makes anyone check the email several times before clicking on it and be careful not to share his email publicly or not to use aliases.

You're right, it's the customer support database that's been hacked. I find it even worse to entrust private information to third parties than if they'd been hacked themselves (from a marketing/company reputation point of view I mean).

I also recommend everyone to use an alias system for their emails, it greatly limits the risks and is an excellent practice. Unfortunately, it's still under-exploited, and should be recommended more often.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: NikeFit_7777 on January 29, 2024, 01:20:04 PM
Does anyone use this (cold) wallet? If yes, please answer me a few questions.

— Does Trezor have a recovery function like Leadger?
— Does Trezor have forced firmware update? If I don't want to update the firmware, can I not do it? Will I have access to my funds?
— Who has had problems with the device itself?

If you have something to say, not on the questions above (that would be your experience) - feel free to share information too.

P.S. Appreciate whoever answers the above questions. Never used this device, really interesting.  ???
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: examplens on January 29, 2024, 02:09:58 PM
The problem came from an external company that takes care of email services for the Trezor. Sending newsletters and similar. Almost every serious company works like that. A similar thing happened to some other "big" names, it was talked about here on the forum https://www.altcoinstalks.com/index.php?topic=316040.msg1478541#msg1478541

Does anyone use this (cold) wallet? If yes, please answer me a few questions.

— Does Trezor have a recovery function like Leadger?
— Does Trezor have forced firmware update? If I don't want to update the firmware, can I not do it? Will I have access to my funds?
— Who has had problems with the device itself?

I have both wallets, Trezor and Ledger. I primarily and almost exclusively use Trezor, while Ledger is more for experimentation (for example, I only use it for tokens and some rare altcoins)

Answer to your question (if they are not rhetorical)
- No
- No
- Since I have Trezor One, my only problem is that I don't have support for some of the more important Altcoins.

btw. I use the Trezor wallet almost on a daily basis, it's not just for hold.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: dkbit98 on January 29, 2024, 11:54:55 PM
Does anyone know what is the name of that Trezor partner service?
I don't know if this recent trezor leak was added to haveibeenpwned.com website, but I recommend checking your old email addresses there.
It's not a good idea to have one email address for everything, and signing up for any crypto related newsletter with that email is even worse.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Yamane_Keto on January 30, 2024, 12:59:39 AM

— Does Trezor have a recovery function like Leadger?
— Does Trezor have forced firmware update? If I don't want to update the firmware, can I not do it? Will I have access to my funds?
— Who has had problems with the device itself?

No, the Trezor wallet code is open source https://github.com/trezor. If they add anything, you will hear from the developer reviews.

No, if the private keys manage to leave your wallet then you should seriously consider selling Trezor.

Hardware related issues are not a usual thing and you can read more about them https://forum.trezor.io/t/about-the-hardware-issues-category/6295/8
Most likely, your experience will be good. Watch some videos on YouTube, and if you want to make a comparison between HWs, create a separate topic for that.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: NikeFit_7777 on January 30, 2024, 01:12:49 PM
I have both wallets, Trezor and Ledger. I primarily and almost exclusively use Trezor, while Ledger is more for experimentation (for example, I only use it for tokens and some rare altcoins)

Answer to your question (if they are not rhetorical)
- No
- No
- Since I have Trezor One, my only problem is that I don't have support for some of the more important Altcoins.

btw. I use the Trezor wallet almost on a daily basis, it's not just for hold.
I didn't ask a question for the sake of asking a question, I'm genuinely curious. I have never used this device before. It's great that Trezor doesn't have a recovery function. Leadger - should have made this feature free. I don't understand how you can store your cryptocurrency there if your cid phrase is known to someone else. Where is the anonymity they are talking about? So they say one thing and do another? So it turns out.  ;D

P.S. Leadger I don't have, but so far I like trezor better in that regard. Thanks for replying! It was important to me.  8)
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: examplens on January 30, 2024, 02:37:02 PM
Does anyone know what is the name of that Trezor partner service?
I don't know if this recent trezor leak was added to haveibeenpwned.com website, but I recommend checking your old email addresses there.
It's not a good idea to have one email address for everything, and signing up for any crypto related newsletter with that email is even worse.

Here is my case.
Earlier, I signed up for the Trezor newsletter with one address, which otherwise only serves me for such things. And that's where I got that phishing email mentioned. It seems that they stopped using that service at the moment, so by checking I get this:

Quote
We have found some suspicious activity in this client's account and this link had been blocked for your safety.

We apologise for any inconvenience caused.
If you think the link is safe, please contact the sender of the email.

Later (January 2018) when I bought a Trezor wallet, I did it using my private email address and I didn't get any phishing offers on it. Also, email correspondence during the purchase flowed through the MailChimp service (by Trezor).

Lately, I've been deleting all emails, so I have very few of them in my inbox, but here I found an interesting one. It's from
Sep 27, 2022, 9:00 AM

Quote
We're back! Confirm your newsletter preferences to stay up to date

We’ve been working hard to set up our new mailing platform to ensure you get the content you want and need in the safest way possible.

all the links from this email lead me to the page with the message I quoted above.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: joniboini on February 02, 2024, 04:54:20 AM
It's great that Trezor doesn't have a recovery function. Leadger - should have made this feature free. I don't understand how you can store your cryptocurrency there if your cid phrase is known to someone else. Where is the anonymity they are talking about? So they say one thing and do another? So it turns out.  ;D
They should never made a feature like that honestly, just goes to show that a closed-source wallet is just not it. That being said, if you want to buy a Trezor wallet, make sure you are aware that they do have some issues (albeit not directly related to the hardware itself) such as this one. If you plan on using your main e-mail address, always double-check so you don't click some random links. Trezor, Ledger, and even wallet that don't have a company like Electrum names are used for phishing attacks. CMIIW.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Charles-Tim on February 02, 2024, 03:11:54 PM
Trezor, Ledger, and even wallet that don't have a company like Electrum names are used for phishing attacks. CMIIW.
It is simple as Electrum do not ask for email or any personal information. Noncustodial wallets like Sparrow and many other ones do not ask for email and other information from customers. From what I have noticed, only hardware wallets are asking for such information, like while buying the wallet, or subscribing to their newsletter which was what that happened to recently, to those that subscribed to trezor newsletter. Anywhere you provide your email or any other personal information, expecting phishing or your information to be used for something not good.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: NikeFit_7777 on February 03, 2024, 12:15:53 PM
They should never made a feature like that honestly, just goes to show that a closed-source wallet is just not it. That being said, if you want to buy a Trezor wallet, make sure you are aware that they do have some issues (albeit not directly related to the hardware itself) such as this one. If you plan on using your main e-mail address, always double-check so you don't click some random links. Trezor, Ledger, and even wallet that don't have a company like Electrum names are used for phishing attacks. CMIIW.
Leadger is not a cold wallet for me personally. What they did is not acceptable to me. Therefore, I am interested in hearing from people who have used Trezor. I would like to know the opinion of everyone who has used it. Have you personally been caught phishing through the mail? Thanks for the information, I'll be aware of it in the future.

P.S. Another question, how long (in terms of time) did the parcel with the device go? Up to 1 month? Or more? If you ordered of course and how was the package packaged?  ::)

Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on February 04, 2024, 03:06:07 PM
Leadger is not a cold wallet for me personally. What they did is not acceptable to me. Therefore, I am interested in hearing from people who have used Trezor. I would like to know the opinion of everyone who has used it. Have you personally been caught phishing through the mail? Thanks for the information, I'll be aware of it in the future.

I used a Ledger Nano S for years, and in parallel a Trezor Model One. I prefer the Trezor, and Trezor suite is better than Ledger App IMO. Trezor is open source and at least with their app you have Coin Control, can sign messages easily etc.. Doable too with Ledger but less noob-friendly imo. 

With Ledger you will have more altcoins available in the desktop app from scratch.
I was not "phished" by Trezor nor Ledger.

P.S. Another question, how long (in terms of time) did the parcel with the device go? Up to 1 month? Or more? If you ordered of course and how was the package packaged?  ::)

The Trezor was sent from Czech Republic to me, in Bulgaria, with DHL if I remember well. It took 4 or 5 days. It was well packaged, nothing negative to say.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Sim_card on February 04, 2024, 09:50:27 PM
It's just to spread the word: be careful, verify the emails and links you receive if you're using a Trezor, there's been a leak from their database recently.   
I hope nobody lost coins or send anything to scammers, but Trezor should get your shit together !
How many times we need to hear the same story about hacked database from hardware wallets and information form customers until you learn to protect it correctly >:(
None of their customers lost their funds as they were able to notice this on time and there was no report on customers losing their funds. The problem was fixed not long after the breach of data, and all those that they phishing link was sent to their email were smart enough not to click on the phishing link. Trezor needs to step up their security so that such will not happen in future again, if not their users will lose trust in Trezor.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: NikeFit_7777 on February 05, 2024, 10:42:44 AM

I used a Ledger Nano S for years, and in parallel a Trezor Model One. I prefer the Trezor, and Trezor suite is better than Ledger App IMO. Trezor is open source and at least with their app you have Coin Control, can sign messages easily etc.. Doable too with Ledger but less noob-friendly imo. 

With Ledger you will have more altcoins available in the desktop app from scratch.
I was not "phished" by Trezor nor Ledger.

Thanks for the information, of course. But for me personally, Leadger is not a cold wallet - if there is a recovery, automatically minus. It's a good thing I didn't buy it, it would have been a waste of money + time. Question: "After updating the recovery - you were not required to force a firmware update of the Leadger itself?". It's interesting to hear the answer to that.

P.S. I'd better do some more research about Trezor, as practice has shown that in this case it's better not to rush.

The Trezor was sent from Czech Republic to me, in Bulgaria, with DHL if I remember well. It took 4 or 5 days. It was well packaged, nothing negative to say.

I see, so you have to look at the site itself when placing a particular order.  8)
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on February 05, 2024, 12:43:14 PM
Thanks for the information, of course. But for me personally, Leadger is not a cold wallet - if there is a recovery, automatically minus. It's a good thing I didn't buy it, it would have been a waste of money + time. Question: "After updating the recovery - you were not required to force a firmware update of the Leadger itself?". It's interesting to hear the answer to that.

P.S. I'd better do some more research about Trezor, as practice has shown that in this case it's better not to rush.

Yeah I am not a big fan of what Ledger did recently either. I cannot answer for the firmware update as I stopped using my Ledger in early 2023 IIRC. I shouldn't have bought a closed source HW but when I started mining (years ago) I was not educated on the topic and bought a Ledger pretty randomly.

You're right, never rush when it come to money :D 
Trezor is a safe bet IMO, but some other are nice too of course. I will soon try to make my first pitrezor, and will do a topic aboout it here.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: NikeFit_7777 on February 07, 2024, 04:18:33 PM
Yeah I am not a big fan of what Ledger did recently either. I cannot answer for the firmware update as I stopped using my Ledger in early 2023 IIRC. I shouldn't have bought a closed source HW but when I started mining (years ago) I was not educated on the topic and bought a Ledger pretty randomly.

You're right, never rush when it come to money :D 
Trezor is a safe bet IMO, but some other are nice too of course. I will soon try to make my first pitrezor, and will do a topic aboout it here.
Honestly? I don't see how, after what they did. Users can buy devices and use them. Personally for me it's the same as keeping money not in a cold wallet. Where's the guarantee that tomorrow without a firmware update you won't be able to use your device? That's right, no guarantees.

Absolutely right, there's no rush, and why should there be? I'm glad the Trezor campaign didn't think of doing something like this (what the Leadger campaign did). I'd rather study the information + listen to other users' opinions. I take it you don't use this device?   8)
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: bettercrypto on February 08, 2024, 08:18:54 AM
That's a bit of bad news for Trezor users. It seems like even hardware wallets today are hard to trust when there is a breach issue like that. The Trezor has been around for a long time, and suddenly there was such a problem.

I just hope their Trezor user clients don't get traumatized because of that problem. Hardware wallets are expensive, and when this happens, it seems that it is very difficult to find and trust hardware wallets.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: joniboini on February 10, 2024, 09:26:27 AM
That's a bit of bad news for Trezor users. It seems like even hardware wallets today are hard to trust when there is a breach issue like that. The Trezor has been around for a long time, and suddenly there was such a problem.
I don't think this will change how users trust the security of the wallet though, this data breach is not related to that in any way. If anything some of them will look for a better alternative to protect their privacy if they need to buy from Trezor directly, while some will probably build their own wallet using their open-source code. Obviously, if they include a very sensitive data such as users' wallet address, things will be different. CMIIW.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on February 10, 2024, 11:17:01 AM
I don't think this will change how users trust the security of the wallet though, this data breach is not related to that in any way. If anything some of them will look for a better alternative to protect their privacy if they need to buy from Trezor directly, while some will probably build their own wallet using their open-source code. Obviously, if they include a very sensitive data such as users' wallet address, things will be different. CMIIW.

You're right, this problem has more to do with personal data and user privacy than with their funds directly.

But we shouldn't think that this is a trivial matter either, because based on the information that has been leaked, social engineering or other techniques could be used in some cases to access funds indirectly.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: joniboini on February 15, 2024, 08:08:30 AM
But we shouldn't think that this is a trivial matter either, because based on the information that has been leaked, social engineering or other techniques could be used in some cases to access funds indirectly.
Oh, that's for sure. I didn't think I implied that this was not a serious matter, sorry if that was the case. I thought saying people will try to find better ways to buy or build their own wallets means this can definitely affect Trezor in one way or the other. On the other hand, a phishing attack due to a leaked database is not new, so people should realize that any suspicious e-mail related to their wallet is probably a scam attempt. At the end of the day, hopefully, Trezor will learn from this and choose a better provider or a better way to store customer data for support purposes and not store something even more sensitive like I've mentioned above.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: bitmover on February 16, 2024, 10:46:28 AM
The problem came from an external company that takes care of email services for the Trezor. Sending newsletters and similar. Almost every serious company works like that. A similar thing happened to some other "big" names, it was talked about here on the forum https://www.altcoinstalks.com/index.php?topic=316040.msg1478541#msg1478541

I think crupto community is too harsh with companies.
Ledger faced a similar problem in the past, and now every comment about ledger is negative in reddit, btt  etc..

I don't agree  with that
 I own a ledger and I like it. I don't support the recovery tool about sending the seed online, but luckily it is not available in my device.

Quote

Does anyone use this (cold) wallet? If yes, please answer me a few questions.

— Does Trezor have a recovery function like Leadger?
— Does Trezor have forced firmware update? If I don't want to update the firmware, can I not do it? Will I have access to my funds?
— Who has had problems with the device itself?

I have both wallets, Trezor and Ledger. I primarily and almost exclusively use Trezor, while Ledger is more for experimentation (for example, I only use it for tokens and some rare altcoins)

Answer to your question (if they are not rhetorical)
- No
- No
- Since I have Trezor One, my only problem is that I don't have support for some of the more important Altcoins.

btw. I use the Trezor wallet almost on a daily basis, it's not just for hold.

Ledger has way more functionality
Supports every altcoin out there, and it is very safe to use.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: examplens on February 16, 2024, 11:07:02 AM
I think crupto community is too harsh with companies.
Ledger faced a similar problem in the past, and now every comment about ledger is negative in reddit, btt  etc..

I don't agree  with that
 I own a ledger and I like it. I don't support the recovery tool about sending the seed online, but luckily it is not available in my device.

If the only problem with Ledger was that there were leaked email addresses, I believe that it would be "forgiven" somehow. But they screwed up the matter in more ways than one. BS with private keys is certainly much more serious than the problem with the database of email addresses.
It is enough when someone says "luckily it is not available in my device." It is all about trust in them.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on February 18, 2024, 10:08:51 AM
I agree, for a long time Ledger was an okay option, but it's clearly their way of communicating and their commercial strategy which's slowly killing them.

I've completely stopped using mine because I don't want closed source wallets for my coins anymore, but I agree that the email database leak didn't scare me at the time. I thought they at least had an opportunity to learn from their mistakes...

I have to admit that since I switched to Trezor and Electrum on airgapped computers, I'm a bit more relaxed.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: NikeFit_7777 on February 19, 2024, 08:11:24 AM
I think crupto community is too harsh with companies. Ledger faced a similar problem in the past, and now every comment about ledger is negative in reddit, btt  etc..
I don't agree  with that/ I own a ledger and I like it. I don't support the recovery tool about sending the seed online, but luckily it is not available in my device.
Ledger has way more functionality. Supports every altcoin out there, and it is very safe to use.
What they are doing is unacceptable in my opinion. Which existing cold wallets have done something like this? The answer is obvious, no. After reading the reviews about Trezor wallet, changed my opinion completely. Good thing I didn't waste no time/no money to order Leadger. Get it right, if Trezor made a similar feature tomorrow - people would also write solid negativity etc. No one needs it and no one wants to pass on their seed phrase to outsiders.

P.S. In general, the choice of such a device, the matter is individual to each user. Have you used a Trezor wallet? If not, check out the video on YouTube.  ???
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Don Pedro Dinero on February 19, 2024, 04:55:57 PM
I think crupto community is too harsh with companies.
Ledger faced a similar problem in the past, and now every comment about ledger is negative in reddit, btt  etc..

I don't agree  with that
I own a ledger and I like it. I don't support the recovery tool about sending the seed online, but luckily it is not available in my device.

Too harsh? Ledger has more than earned the bad reputation it has today, and if it has not lost more customers it is because it is still living off the reputation it gained back when there was practically only Ledger and Trezor. Ledger has had several security breaches, so if people don't care about their privacy at all and want their data to end up in the hands of hackers the best thing to do for them is to have a Ledger.


Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Husna QA on March 23, 2024, 04:54:02 PM
I think crupto community is too harsh with companies.
Ledger faced a similar problem in the past, and now every comment about ledger is negative in reddit, btt  etc..

I don't agree  with that
I own a ledger and I like it. I don't support the recovery tool about sending the seed online, but luckily it is not available in my device.

Too harsh? Ledger has more than earned the bad reputation it has today, and if it has not lost more customers it is because it is still living off the reputation it gained back when there was practically only Ledger and Trezor. Ledger has had several security breaches, so if people don't care about their privacy at all and want their data to end up in the hands of hackers the best thing to do for them is to have a Ledger.

The more popular a product is, in this case, a hardware wallet, the more hackers are likely to target it or the manufacturer.

https://www.bleepingcomputer.com/news/security/trezor-support-site-breach-exposes-personal-data-of-66-000-customers/ (https://www.bleepingcomputer.com/news/security/trezor-support-site-breach-exposes-personal-data-of-66-000-customers/)
https://www.coindesk.com/markets/2020/07/29/crypto-wallet-maker-ledger-loses-1m-email-addresses-in-data-theft/ (https://www.coindesk.com/markets/2020/07/29/crypto-wallet-maker-ledger-loses-1m-email-addresses-in-data-theft/)

If you don't believe in hardware wallets, If you do not trust hardware wallets, don't use them, whether it's Ledger, Trezor, Coldcard or others.

The debate about choosing the most secure hardware wallet can be endless because each has advantages and disadvantages.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: bitmover on March 23, 2024, 07:02:52 PM

If you don't believe in hardware wallets, don't use them, whether it's Ledger, Trezor, Coldcard or others.

The debate about choosing the most secure hardware wallet can be endless because each has advantages and disadvantages.

I think it makes little sense to "not believe"  in hardware wallets.

They are all very safe, specially the most popular ones. I never seen someone being hacked using the properly.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: dkbit98 on March 23, 2024, 08:20:48 PM
If you don't believe in hardware wallets, don't use them, whether it's Ledger, Trezor, Coldcard or others.
Hardware Wallets should not be considered as religion, so nobody has to believe or not believe in them.
It's just a miniature size device dedicated only for cryptocurrency use.

They are all very safe, specially the most popular ones. I never seen someone being hacked using the properly.
They are not all safe.
I have been researching hardware wallets for years, and many of them had security flaws, especially popular devices.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Husna QA on March 23, 2024, 11:53:37 PM
I think it makes little sense to "not believe"  in hardware wallets.

They are all very safe, specially the most popular ones. I never seen someone being hacked using the properly.
Hardware Wallets should not be considered as religion, so nobody has to believe or not believe in them.
It's just a miniature size device dedicated only for cryptocurrency use.

I didn't mean to use "believe" words with religious beliefs. I'm sorry if the placement of the word was inappropriate and caused misinterpretation. What I meant was, "If you do not trust hardware wallets ..."


They are all very safe, specially the most popular ones. I never seen someone being hacked using the properly.
They are not all safe.
I have been researching hardware wallets for years, and many of them had security flaws, especially popular devices.

So, does that mean more non-popular hardware wallets have better security than popular devices?
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Mr. Magkaisa on March 24, 2024, 07:22:02 AM
          -   It seems like that incident is not acceptable, imagine a hardware wallet had such an issue. Maybe after those events, many of their users shifted to other hardwallets. Because I ordered a hardware wallet which I ordered is a Secux wallet.

But trezor was my firt choice before, so I changed my mind and I saw that secux is better in my research. Just be careful with the hardware wallets we choose.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on March 24, 2024, 11:55:05 AM
          -   It seems like that incident is not acceptable, imagine a hardware wallet had such an issue. Maybe after those events, many of their users shifted to other hardwallets. Because I ordered a hardware wallet which I ordered is a Secux wallet.

But trezor was my firt choice before, so I changed my mind and I saw that secux is better in my research. Just be careful with the hardware wallets we choose.

I am curious as I don't really know much about SecuX, why do you think it is better than Trezor?
I don't know it in detail, but I thought (not sure) it was closed-source (which is a big no-no for me), but I am always curious to know more about new HW.

Coming back to Trezor, the hack that is the subject of this topic does not directly compromise the security of users' funds, and personally it hasn't deterred me from using a Trezor. But I understand your point of view.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: bitmover on March 24, 2024, 09:46:00 PM

They are all very safe, specially the most popular ones. I never seen someone being hacked using the properly.
They are not all safe.
I have been researching hardware wallets for years, and many of them had security flaws, especially popular devices.

Your personal data is not safe. But your crypto is lol

I think that is the most important.

Anyway, we can always protect your personal data.  That is up to us to use VPN, ignore ledger live, etc etc..
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on March 24, 2024, 09:51:25 PM
Your personal data is not safe. But your crypto is lol

I think that is the most important.

Anyway, we can always protect your personal data.  That is up to us to use VPN, ignore ledger live, etc etc..

Yeah but if you use a VPN, you have to chose carefully your VPN provider. I would avoid NordVPN for example, same with lot of others which are collaborating with 3 letters agencies...
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: bitmover on March 25, 2024, 02:02:17 PM
Your personal data is not safe. But your crypto is lol

I think that is the most important.

Anyway, we can always protect your personal data.  That is up to us to use VPN, ignore ledger live, etc etc..

Yeah but if you use a VPN, you have to chose carefully your VPN provider. I would avoid NordVPN for example, same with lot of others which are collaborating with 3 letters agencies...

I agree.
I use proton vpn.  I think it is a great company committed with privacy.
https://protonvpn.com/blackfriday/
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: paid2 on March 25, 2024, 02:15:35 PM
I agree.
I use proton vpn.  I think it is a great company committed with privacy.
https://protonvpn.com/blackfriday/ (https://protonvpn.com/blackfriday/)

Yeah Proton and Mullvad are both the most trusted providers for now, if I am not wrong? Good choice imo
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: Lucius on March 25, 2024, 05:59:58 PM
I agree.
I use proton vpn.  I think it is a great company committed with privacy.


If I'm not mistaken, even they are not resistant to requests coming from powerful security agencies, and I think it was mentioned in some discussions on BTT. Privacy goes up to a certain limit when it actually ceases to exist, which means that if "they" ask for access to your e-mail for "justified" reasons, there is no doubt that they will get it.



As for companies like Trezor or Ledger, what can we say about someone who should be 100% focused on the privacy of their clients, and on the other hand hires "amateurs" who keep their clients' data and allow it to be hacked? I simply lose trust in such companies, because if it happened to them once, it will surely happen again.
Title: Re: Trezor wallet : breach exposes data of 60,000+ customers
Post by: dkbit98 on March 25, 2024, 06:31:32 PM
Your personal data is not safe. But your crypto is lol
That can be debated also, especially with ledger wallet that can export seed words to third parties.
I would not worry so much about trezor devices, they are the first original hardware wallet and they are reliable if used correctly.
Human errors and phishing attacks are something else and they are going to keep happening.