(Real) data security begins and ends with us.
If we trust companies, sooner or later that data gets sold and/or stolen.
Without encryption, strong passwords, and basic habits for rotating them, we are all hackable.
We Criptonautas accept reality → Trezor has had several hacks in its databases.
Phishing alert (01/25)
We are issuing a warning regarding a security incident involving an unauthorized email sent impersonating Trezor.
The incident occurred in our newsletter database from a third-party email service provider that we use.
And it is not the first time something similar has happened:
https://twitter.com/Trezor/status/1510548489884815361
The ideal practice is to use unique emails for every site and a secure (not private) password manager.