Trezor and SafePal Breach Hits 54,000 Users as Phishing Threat Grows

A breach. 54,000 users. And no real explanation yet from either company involved.

Trezor and SafePal — two of the more recognizable names in hardware crypto wallets — are at the center of a data security incident that’s rattling their user base. Sensitive user information was exposed, though neither company has spelled out exactly what data got out or how the attackers got in. What’s clear is that 54,000 people are now in a riskier spot than they were before, and the phishing threat that follows a leak like this is very real. Cybercriminals don’t need much. A name, an email address, maybe a wallet hint — that’s enough to craft a convincing fake message that tricks someone into handing over credentials or funds.

What Got Exposed, and What Didn’t Get Said

Neither Trezor nor SafePal has put out a detailed account of the breach. Not the timeline. Not the specific data types. Not the attack vector. Users are basically left guessing whether it was passwords, email addresses, physical addresses, or something else entirely. The exact moment the breach happened is also undisclosed, which means nobody knows how long their data was sitting out there before anyone noticed.

That silence is doing real damage. People who own hardware wallets tend to be more security-conscious than the average crypto user — that’s kind of the whole point of buying one. So when the companies behind those wallets go quiet after an incident like this, it hits harder. The lack of any detailed disclosure has left users anxious, and probably more suspicious of every email that lands in their inbox right now.

Both companies are under pressure to say something more substantive. Users and industry observers want a clear picture: what happened, what data was taken, what’s being done to close the gap, and what comes next. So far, that picture hasn’t materialized.

Phishing Risk Is the Immediate Danger

Here’s the practical problem. Once personal data from a crypto wallet provider leaks, it becomes bait. Attackers can use it to send messages that look completely legitimate — fake support emails, fake security alerts, fake requests to verify account details. Someone who already knows your name and knows you use Trezor or SafePal is going to write a much more convincing phishing email than a random spammer would.

Related: SafePal Data Breach Hits 40,000 Crypto Wallet Users After Phishing Wave

Affected users are being urged to treat any unexpected communication with serious skepticism right now. Changing passwords is a basic starting point. Enabling two-factor authentication, if it’s not already active, is another layer worth adding. And probably the most important thing: don’t click links in emails that claim to be from Trezor or SafePal until both companies have confirmed their official communication channels are clean.

The broader crypto community is watching this closely. Hardware wallets have long been sold on the idea that they’re the safest way to hold digital assets — the cold storage option that keeps funds away from exchange hacks and hot wallet vulnerabilities. A breach of user data at two major hardware wallet providers doesn’t break that argument entirely, but it does complicate it. Security isn’t just about the device. It’s about every piece of data the company holds on you.

Galaxy’s CLARITY Act Forecast Adds to Industry Uncertainty

Separately, Galaxy put the odds of the CLARITY Act passing at just 10%. The legislation was meant to bring regulatory clarity to the crypto sector — a framework that’s been missing for a long time and that a lot of industry players have been waiting on. A 10% chance is pretty much a dead end for now. And without clear rules, companies and users alike are navigating a space where the legal landscape shifts constantly and the guardrails aren’t where anyone expects them to be.

It’s a rough week for the industry on multiple fronts. A major data breach with no real explanation from the companies involved, and a key piece of regulatory legislation that probably won’t pass. Neither development inspires confidence.

Read also: SafePal Data Breach Hits 39,798 Users but Crypto Assets Stay Safe

Users affected by the Trezor and SafePal breach should monitor both companies’ official channels — not third-party sources, not social media rumors — for any formal updates. The situation is still developing, and the absence of a clear timeline for when more information will come makes it harder to know how long this uncertainty drags on.

Galaxy’s 10% estimate for the CLARITY Act stands as the most concrete number available on the regulatory side.