[Yin Yang]

Yikes

ShipMonk, Trezor’s fulfillment partner, suffered unauthorized access to its systems, affecting nearly 14,000 customers’ data, the cold storage crypto wallet firm reported Thursday.

[MadScientist]

Wonder what data, haven't check but, prepare the floodgates for targeted spear fishing and simswaps

[Yin Yang]

Wonder what data, haven't check but, prepare the floodgates for targeted spear fishing and simswaps

Oh 100%. Name, physical address where it was shipped and email

[SIM-1169085]

Bought mine years ago so I guess I'm safe. This happened to Ledger years ago and I'm still getting emails from these yahoos.

We're gonna be seeing a lot of hardware wallet news since cold card wallets hack was broadcasted so recently.

[Mewtwo]

Bought my new Trezor like 2 weeks ago. Not so happy about this. I used a disposable email, but my address is ofc real. Come rob me, I’ll fucking shoot ya

[MadScientist]

Bought my new Trezor like 2 weeks ago. Not so happy about this. I used a disposable email, but my address is ofc real. Come rob me, I’ll fucking shoot ya

I'm already in your closet 😈

[Money-]

Bought my new Trezor like 2 weeks ago. Not so happy about this. I used a disposable email, but my address is ofc real. Come rob me, I’ll fucking shoot ya

I'll see you bro. I am gona use a different way.

[Omniscient]

Likely an increase is exploit spam and phishing attempts because of this. I kind of doubt simswapping and kidnapping will be prevalent. Not without someone obviously bragging about having millions in crypto.

A lot of people have hardware wallets for only $1-10k in funds.

[SUI-3183372]

After Ledger's breach, some people were receiving 20-30 scam calls per day, at all hours of the day.

There was a case where one of these individuals was a MD who would be on call over night, unable to shut his phone off nor could he ignore phone calls. Blocking numbers / spam filtering is only so effective. Eventually he had to change all of his info because the scam calls were so pervasive.

I have colleagues who, to this day, receiving physical scam mail on a regular basis.

In some cases, scammers have sent new Ledgers to victim addresses. Scammers will buy new ledgers, pre-load a seed phrase onto it, fabricate a new instruction manual that makes it seem like a pre-loaded wallet is normal, and fabricate written correspondence "from Ledger" that explains that the old device that the victim had bought was faulty and Ledger was sending them a brand new replacement device, and to move funds to the new device. Anyone who did so, trusting the pre-loaded wallet (which was a non-zero number of people), got owned immediately.

Scammers have been very persistent and sometimes quite clever with the leaked Ledger data. Now that have a brand new cache of names and addresses that they can double their efforts down on. Annoying day for those impacted, hopefully no physical attacks stem from this.

If you live in France and are part of this leak... consider moving anywhere else... There have been 54 recorded instances of physical attacks and kidnappings related to crypto globally so far this year. 34 of those instances (63%) have occurred in France.

[Omniscient]

After Ledger's breach, some people were receiving 20-30 scam calls per day, at all hours of the day.

There was a case where one of these individuals was a MD who would be on call over night, unable to shut his phone off nor could he ignore phone calls. Blocking numbers / spam filtering is only so effective. Eventually he had to change all of his info because the scam calls were so pervasive.

I have colleagues who, to this day, receiving physical scam mail on a regular basis.

In some cases, scammers have sent new Ledgers to victim addresses. Scammers will buy new ledgers, pre-load a seed phrase onto it, fabricate a new instruction manual that makes it seem like a pre-loaded wallet is normal, and fabricate written correspondence "from Ledger" that explains that the old device that the victim had bought was faulty and Ledger was sending them a brand new replacement device, and to move funds to the new device. Anyone who did so, trusting the pre-loaded wallet (which was a non-zero number of people), got owned immediately.

Scammers have been very persistent and sometimes quite clever with the leaked Ledger data. Now that have a brand new cache of names and addresses that they can double their efforts down on. Annoying day for those impacted, hopefully no physical attacks stem from this.

If you live in France and are part of this leak... consider moving anywhere else... There have been 54 recorded instances of physical attacks and kidnappings related to crypto globally so far this year. 34 of those instances (63%) have occurred in France.

Crazy scenarios some of which I hadn't heard about yet. Like the pre-loaded Ledger wallets. Nuts.

Where there is money, there are scams.

[SUI-3183372]

Another hardware wallet has leaked payment/shipping data to unauthorized third parties:

The incident impacts approximately 39,798 customers who placed orders between March 2, 2025 and April 11, 2026. Exposed information includes name, email address, shipping address, phone number, and purchase details.

[jcole]

Luckily I bought my Trezor before there was a broadcasted data leak.

[Cap]

After Ledger's breach, some people were receiving 20-30 scam calls per day, at all hours of the day.

There was a case where one of these individuals was a MD who would be on call over night, unable to shut his phone off nor could he ignore phone calls. Blocking numbers / spam filtering is only so effective. Eventually he had to change all of his info because the scam calls were so pervasive.

I have colleagues who, to this day, receiving physical scam mail on a regular basis.

In some cases, scammers have sent new Ledgers to victim addresses. Scammers will buy new ledgers, pre-load a seed phrase onto it, fabricate a new instruction manual that makes it seem like a pre-loaded wallet is normal, and fabricate written correspondence "from Ledger" that explains that the old device that the victim had bought was faulty and Ledger was sending them a brand new replacement device, and to move funds to the new device. Anyone who did so, trusting the pre-loaded wallet (which was a non-zero number of people), got owned immediately.

Scammers have been very persistent and sometimes quite clever with the leaked Ledger data. Now that have a brand new cache of names and addresses that they can double their efforts down on. Annoying day for those impacted, hopefully no physical attacks stem from this.

If you live in France and are part of this leak... consider moving anywhere else... There have been 54 recorded instances of physical attacks and kidnappings related to crypto globally so far this year. 34 of those instances (63%) have occurred in France.

I actually just received physical mail the other day for the Trezor breach saying they’ll be sending me a new Trezor within the next week or so. They also have a QR code to scan to see if my current hardware wallet was affected.

[Omniscient]

I actually just received physical mail the other day for the Trezor breach saying they’ll be sending me a new Trezor within the next week or so. They also have a QR code to scan to see if my current hardware wallet was affected.

Ugh, that sounds like the scam SUI-3183372 described. You may want to read his posts in this thread again.

I don't see how the data breach forces them to send you a new Trezor. It changes nothing for your security. Be super careful.

[Cap]

Ugh, that sounds like the scam SUI-3183372 described. You may want to read his posts in this thread again.

I don't see how the data breach forces them to send you a new Trezor. It changes nothing for your security. Be super careful.

Yeah, super strange scam. Like you said, I don’t know how getting a new Trezor would increase the security if it was a data breach. Definitely going to be careful.