Trezor phishing attack traced to Brevo login authorization flaw
first published 2026-09-11T04:21:14Z
Brevo said an authorization failure in its login system let an attacker access 138 client accounts and send phishing emails. The fraudulent messages reached large crypto-related mailing lists, including about 347,000 Trezor newsletter subscribers, and also affected BitBox and CoinTracking. The companies said only limited subscriber data was stored with Brevo, and Brevo said the access should have been confined to one organization but spread across others because of the boundary failure.
AI Analysis
The summary describes unauthorized access to multiple accounts and phishing emails sent to large crypto mailing lists, including Trezor subscribers, which is clearly negative and could trigger near-term security concerns. The impact is moderate-high because it involves a large user base and multiple crypto companies, but it is a security incident rather than a direct market or protocol event.
Expected Investor Sentiment: Neutral
Potential Market Impact: High
