Hacker lists purported Trezor user database; developers suspect it is fake

On the exploit.in forum, a database purportedly containing information on 342,619 Trezor hardware-wallet users surfaced for sale. The initial asking price was 2 BTC.

Seller going by the handle Polaris claims the database contains names, email addresses, phone numbers and the listed physical residential addresses for February 2016 through June 2020.

Representatives of Trezor said they are looking into the information. In their words, the sale listing is most likely fake.

Hi, we are looking into it but most likely it’s a fake.

— Trezor (@Trezor) February 22, 2021

In Forklog’s comment, Satoshi Labs chief Pavol Rusnak said that no Trezor user data is for sale.

Rusnak added that it is hard to say how valid the leak information is, since many Ledger users also bought Trezor.

In October 2020, the same seller listed for sale a database of Ledger hardware-wallet users’ personal information, stolen in June.

On December 21, 2020, 1 million emails, 272,000 home addresses and phone numbers of Ledger users were made publicly accessible through the Raidforums forum.

Later, Ledger Nano wallet holders began to receive threats from unknown attackers demanding a ransom of 0.3 BTC or 10 ETH.

CEO Pascal Gotye ruled out the possibility of compensation for those affected by the leak and questioned the credibility of the threats to users.

In January 2021, Trezor developers warned Android users about a fake app Mobile Manager Wallet in the Google Play store.

Follow ForkLog news on Twitter!