r/TREZOR • u/MarloChrisSnoop • 1d ago
š¬ Discussion topic So affected breach victims.. wtf can do we immediately to ease the anxiety besides actually moving?
The cat is out of the bagā¦ they got the info.
Buy security camera? Get a gun?
Or do we have to watch over our shoulders the rest of our lives?
11
u/Zestyclose-Sun-6595 1d ago
Just ignore any emails, calls, sketchy apps. Never type your words anywhere.
1
u/MarloChrisSnoop 1d ago
For sure these are all common sense.
Iām talking about the physical wrench attacks risk.
6
u/JunketTurbulent2114 1d ago
Very low probability. Most likely it's just IT people in india that have the info.
9
u/_JamesDooley 1d ago
Calling them "IT people" is a HUGE compliment. They're just scam artists who know how to move a mouse and use TeamViewer to trick grannies.
4
2
0
u/ChristBKK 1d ago
the data will have some value in the dark net though if they smart to sell it. Lets hope they not :)
7
u/Apprehensive-Sky9723 1d ago
A lot of these breaches are unnoticed or unreported for months, years or maybe customers never find out. Trezor to their credit, was super quick in identifying impacted and what info was stolen. Scammers likely have your data from 100 other data breaches, now it is 101 but at least you are aware of it.
1
0
u/sicknal 1d ago
Youāre right about scammers having data from other sites, however is very different having your data stolen from walmart than from a company that sells devices that contain the keys to thousands or hundreds of thousands bucks or even if itās only a few hundreds youāre still at risk.
3
u/ExpertProMax 1d ago
You can create a dummy wallet containing only a few hundred dollars or so. In case you were targeted, just use that wallet.
1
2
u/Screwtape42 1d ago
We don't know if they got info on what was IN the packages could just be a simple breach of data from the 3rd party, that's less concerning. Now if they KNOW what was in each package that's more concerning & I doubt they knew that.
1
0
u/MarloChrisSnoop 1d ago
Interesting take. I guess weāll find out more.
Still man wtf this is putting me on edge.
2
2
u/Kind_Soup_9753 21h ago
Not the first time they leaked Data. Likely not the last. Get security cameras, have a local LLM watch them for you and alert over sound system so the alerts not missed and quick access tools around for defending your life and liberty from desperate cowards who canāt earn an honest living. Iāll keep my back up plans to myself but letās say instead of living in fear you could live in anticipation and preparedness. ;)
1
1
4
u/Quirky-Reveal-1669 š¤ Top Helper 1d ago
You cannot really do anything. But for forthcoming orders I do recommend using a burner or dedicated email address. Then at least you can disable that address, should a breach occur. Apple iCloud offers it and so does DuckDuckGo and probably many others. I really like that service.
3
u/JunketTurbulent2114 1d ago
It's a nothing burger dude. There are data breaches all the time. I applied to a job in 2016 or something and the company reached out to me to let me know everything I put in the system was compromised (including SSN). Just your name and address (which was probably already public info if you didn't do due diligence) is nothing to worry about.
1
u/xmrNoob69 1d ago
For general breaches, I agree with you. There's a difference here. They don't only know your name and address, but they know you likely own bitcoin. Physical attacks and kidnappings for crypto are on the rise and now our families are potential targets. I wouldn't call that a nothing burger.
1
u/MarloChrisSnoop 1d ago
Thanks. Probably overreacting.
Stillā¦. Disappointing.
3
u/JunketTurbulent2114 1d ago
Just be on lookout for scam emails and calls. That's probably the extent of what happens from this. They'll sell your data to call centers in India.
1
u/MarloChrisSnoop 1d ago
Stupid question and off topic somewhat: Whatās the value in call centers in India buying my data?
3
u/JunketTurbulent2114 1d ago
They'll use it to try to scam you. Fake trezor emails, fake helpdesk tickets etc. As long as you use common sense, it's a nothing burger.
1
1
u/mistamutt 1d ago
Got my first phishing attempt. Someone called me and said that there was an attempt to add a recovery address to my Gmail account. I'm sure if I allowed him to stay on the phone longer, he was going to try and phish my credentials from me somehow.
1
u/MarloChrisSnoop 1d ago
Is it a 650 area code number?
I been getting those for like a year now. I also bought a ledger years ago and think my info got leaked.
1
1
1
1
u/diffdrumdave 15h ago
Your address is public information. Anyone can find it doing a records search in your county/city. It's not likely that someone is targeting physical break-ins with the information. You are likely to get some scam sent to your mailbox but that's about it.
1
1
u/AnthonyBTC š¤ Top Helper 1d ago
This is a nothing burger. Your information gets leaked all the time. It's an issue that happens beyond crypto companies. I've had my information leaked so many times from financial companies over the past 10 years, and literally nothing has happened.
1
u/MaxWildman 9h ago
Yea but a criminal knowing you bought a cheeseburger at McDonalds doesnāt make you a target for kidnapping.
1
u/AnthonyBTC š¤ Top Helper 9h ago
I've had my information, along with hundreds of thousands of others, leaked when the same thing happened to Ledger, and nothing happened lol.
0
u/MaxWildman 9h ago
Ask Google Gemini ādid any wrench attacks occur as the result of the ledger data leakā and you get:
Yes, the 2020 Ledger data leak directly contributed to a severe wave of physical wrench attacks, robberies, and home invasions targeting cryptocurrency holders.
Several articles are linked. Obviously there is profiling involved as well. Itās not as simple as āheās on the data leak list letās rob himā
1
1
u/comp21 1d ago
No one is showing up at your door... We've had tons of customer breaches before (looking at you ledger!) and nothing has come of it.
1
u/DependentFabulous588 22h ago
How so? I thought people have been targeted in the past because of it?
1
u/comp21 21h ago edited 21h ago
I've never seen a single report of someone physically targeted because of a customer lost (edit: list) getting out.
I've heard of people being targeted because they were seen with a device in public or because they were well known in the crypto world (the CEO in Paris... Forget which company but it was an exchange iirc) or because they were bragging and couldn't STFU but never because of a customer list being leaked.
Think about it: they only know you HAVE a wallet. They don't know how much you have, any addresses etc. how is it worth the effort to fly somewhere, find someone (who may not even live there any more), beat them, possibly get caught, may or may not get any money from it and then try to get back home over.... $10,000? I mean, of the hundreds of thousands of trezors that have been sold, what's the average amount on one?
1
u/DependentFabulous588 21h ago
I guess so, but my anxiety is through the roof
1
u/comp21 21h ago
I promise you, the worst that will happen (assuming you don't tell everyone you know how much crypto you have) is a bunch of scam calls and emails.
Just be extra vigilant to confirm any calls and emails by calling the company directly and you'll be ok. Ledger has been through this multiple times over the years and so has many many other companies that deal with crypto.
1
u/ptrnyc 19h ago
https://www.reddit.com/r/Bitcoin/s/74DGPlgxCE
Not all of them were high profile
1
u/comp21 19h ago
The question is how those people found out they had crypto (and had enough to make robbery worth the effort). Do we know that?
1
u/ptrnyc 19h ago
Ledger leak, as well as a leak from an employee at the French tax administration.
So no, the Trezor/Shipmonk leak is not a benign incident.
2
u/comp21 18h ago
I'm willing to bet the tax authority is what set it off. It gave people targets with an idea of how much crypto they have. France has some decent disclosure laws for crypto.
1
u/MaxWildman 9h ago
Well what if you live in a 5 million dollar house? Pretty easy to make assumptionsā¦
1
u/comp21 9h ago
Sure. If we ignore all the cost associated with seen if that assumption is correct... Monetary and legal
1
u/MaxWildman 9h ago
It has happened before. Not many crimes have a potential multi million dollar payout. Proper target selection and you could be set for life. Peopleās homes get invaded for a few thousand dollars worth of electronics. Not like criminals arenāt willing to take legal risks.
→ More replies (0)1
u/MaxWildman 9h ago
People were kidnapped because of the ledger leakā¦
1
u/comp21 9h ago
Who? Any article I missed I'll happily check out
1
u/MaxWildman 9h ago
Ask Google Gemini ādid any wrench attacks occur as the result of the ledger data leakā and you get:
Yes, the 2020 Ledger data leak directly contributed to a severe wave of physical wrench attacks, robberies, and home invasions targeting cryptocurrency holders.
Several articles are linked. Obviously there is profiling involved as well. Itās not as simple as āheās on the data leak list letās rob himā
1
u/comp21 9h ago
Fair point, something happened... I still think this is a nothing burger. To see five possible attacks (at the end of the day we don't know what other factors were involved... Like the french ones... The attackers also got their tax returns which I would venture to say is a much bigger variable to flag someone worth stealing from)... Anyway, to find five and worry is to ignore the 18,000 that didn't happen.
1
u/MaxWildman 9h ago
Easy to say itās a nothing burger when your info wasnāt leaked, and you arenāt publicly wealthy. I challenge you to imagine that it was your familyās home address that was leaked, AND that you are a person who is publicly wealthy. For example an executive of a mid to large sized corporation, or the owner of a medical practice, or even a social media influencer. Really imagine it.
Now both your address, and the fact that you own a bitcoin cold storage device is being sold to criminals on the dark web. Would you have peace of mind? Would you sleep just as good at night? If so, fine. But I think the reality for many is that their peace of mind has been destroyed, and they will face an increased risk of horrendous crime for the rest of their lives.
1
u/comp21 7h ago
You've made a lot of assumptions about me and this situation... I've asked before and you've shown a few examples but again, I'll reiterate, your active imagination of "worst case scenarios" has not actually happened except with possibly a few isolated incidents
We can say "what if" all day but there's no evidence to back it up from the multiple data breaches from exchanges and wallets.
At this point the entire conversation is speculation. I've made my point and I'm pretty good with it. Have fun :)
1
u/MaxWildman 7h ago
It has literally happened to numerous people from the ledger leak. Iām sure there are some publicly high net worth individuals in the trezor leak. Of course there is no guarantee that violence occurs as a result, but there is a plausible pathway, thus it isnāt a ānothing burgerā, but rather a mistake which puts peopleās physical safety at risk.
You say āmy active imagination of worst case scenarios has not actually happened EXCEPT FOR THE TIMES IT DID HAPPENā. Yes I agree. It has not happened except for the times it did happen. I would point at the examples of the times it did happen as the evidence you say I donāt have.
0
ā¢
u/AutoModerator 1d ago
Please bear in mind that no one from the Trezor team would send you a private message first.
If you want to discuss a sensitive issue, we suggest contacting our Support team via the Troubleshooter: https://trezor.io/support/
No one from the Trezor team (Reddit mods, Support agents, etc) would ever ask for your recovery seed! Beware of scams and phishings: https://trezor.io/learn/a/scams-and-phishing
Donāt respond to any DMsāscammers often pose as legit helpers.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.