Safepal + Trezor data breach

[fullfitlarry]

Meron na namang data breach na nangyari sa isang hardware wallet at ito ang Safepal,

We have recently identified a security incident involving unauthorized access to customer order information during a specific time frame.

This incident did not involve your seed phrase, private keys, wallet password, or other wallet credentials, bank account information, payment card numbers, or government-issued identification numbers. SafePal never requests, collects, processes or stores such information from customers. No evidence has been found that the incident itself compromised access to SafePal wallets or funds.

However, affected order information may be used for targeted phishing and impersonation attempts, and we strongly encourage customers to remain vigilant.

We are extremely sorry to inform the community that order information for customers who placed orders between March 2, 2025 and April 11, 2026. Information including name, email address, shipping address, phone number, and purchase details, was accessed externally without authorization due to the flaw. The affected data involves approximately 39,798 customers.

https://www.safepal.com/en/blog/security-update


At nitong nakaraang araw naman ay Trezor:

ShipMonk, one of Trezor’s shipping providers, has experienced a data breach that exposed sensitive customer order data, including full names, shipping addresses, phone numbers, and email addresses. Trezor devices are secure, but affected customers could experience an increase in phishing attempts. This data breach can potentially affect new customers who received an order from the following countries: US, UK, Sweden, Colombia, Brazil, Italy, and Portugal between 10th of May and 8th of August 2026. If you are unsure whether you were affected, please check your email inbox for a message from help@trezor.io

Update: According to our newest findings, the 1,947 customers whose exposure was limited only to name, city and email address (without the shipping address) may include older orders. We are verifying this information and the timeframe with ShipMonk.

https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident

Kaya sa susunod na mga buwan nito tiyak ang daming mangyayaring phishing attempts sa mga crypto enthusiast na na exposed ang data. At alam naman natin na nag ramp na rin ang mga kriminal sa physical o $5 dollar wrench attack.

Dobleng ingat sa ngayon at isipin natin ang ating seguridad. Sa total nasa 53,487 customer's data ang na exposed dito.

[julerz12]

WTH. Nagbabalak pa naman sana ako na bumili netong Safepal   I guess hindi na muna until they find a way to anonymize purchases.
Itong Trezor naman, good thing hindi kasali ang mga customers dito sa atin sa Pilipinas.
Lumalala na talaga ang mga atake sa Bitcoin ecosystem, from hardware wallet exploits to data breaches; sa tingin ko magpapatuloy pa ang ganitong mga insidente habang nagpapatuloy ang pagiging popular ng BTC.

[abel1337]

Meron ako ng dalawang hard wallets nato though wala naman malaking asset inside of it. Pero alarming padin to given na hard wallet companies sila at dapat priority nila ang security.

To be honest I'm expecting something like this would happen. Nasa history na na hindi hack proof ang hard wallets at ineexpect ko na maraming hackers ang mag attempt para hanapin ang vulnerabilities ng other hardware wallets since very possible ito. Itong data breach nato is just the tip of the iceberg, sooner or later pwede tayong makakita ng another hardware wallet hack. I'm not hoping for it na mangyari pero sana iupdate ng hardware wallet yung security nila at mga possible ma butas kagaya nung sa trezor shipping partner nila. Yun yung tinarget ng hackers since may valuable information sila na pwede magamit for another hacking method which is phishing na nakalagay sa article.

[blockman]

Bakit parang nagkakasabay nangyayari yung mga ganito no? hindi kaya iisang grupo lang lahat nasa likod niyan tapos magkakakilala at napagusapan yung pag atake nila? Parang ang sama ng timing, di pa nga makamove on yung karamihan sa isang hardware wallet dahil malaking pera nakuha, tapos ito namang dalawang ito. Baka medyo malaki din makuha nito sa mga magiging biktima nila dahil sa breach na yan. Huwag lang sana talagang ma fall yung mga kasama yung identity sa breach na yan. Siguro kung sa data breach ng customers medyo ok pa, pero yung magkaroon ng unauthorized access? mas nakakatakot.