The security incident happened on January 17, 2024, Trezor disclosed in a blog post published on January 20.

It involved a third-party support ticketing portal that Trezor uses.

Contact details included names and email addresses for up to 66,000 users were compromised.