Security - TREZOR - Mailchimp data breach Details of the Mailchimp data breach
This email contains details of a data breach which compromised our mailing provider between February and April 2, 2022.
The attack saw Mailchimp employees being phished for privileged access to customer accounts, resulting in the theft of email addresses and in some cases names of subscribers and other data.
Below you will find specific data belonging to you which was stolen in the attack.
Data stolen in the attack
. Your email address
. An approximate location based on your internet provider
Please use this information to protect yourself and be wary of any incoming mail, as the targeted data is being used to send phishing emails to your inbox. Avoid clicking on any links in emails. and never ever enter your seed into a computer without your Trezor device telling you to do so.
This is the latest information we have, following a week of investigation and reluctant cooperation from Mailchimp's senior security staff. You will find a timeline of events on Trezor blog, but we will not be providing any links here so this message does not get confused for a phishing attempt.
You will not receive any more emails from Trezor via Mailchimp. Given the broad scope of the attack, it is important that you remain on alert for phishing attacks coming from other sources, as hundreds of other brands and projects which have not yet been disclosed were also targeted.
https://medium.com/trezor-security-blog/details-of-the-mailchimp-data-breach-a06872caa1fd
* Formas de mitigar situações com mail breachs ou data base leaks:
. Não usar o nome nos emails.
. Ter um serviço de apartado no correio
https://www.ctt.pt/particulares/receber/locais-de-entrega-alternativos/apartados https://lifestyle.sapo.pt/vida-e-ca...rtado-como-pedir-quais-os-custos-e-beneficios
. Ter contas de email para cada use case ou até para cada situção:
- email (ou mais que um) para exchanges CEX. Ter uma para cada CEX será o indicado.
- email (ou mais que um) para exchanges DEX, se for necessario.
- email diferente para cada fornecedor de hardware wallets.
- email para mailing lists.
(...)
* Serviços de email:
.
https://protonmail.com/ - fazer backup de todos os dados necessarios para recuperar a conta.
.
https://www.guerrillamail.com/ - email "descartavel", util para usar com tor browser
https://www.torproject.org/download/ .
* Para melhor ver este texto:
. Faça copy de todo o texto.
. Faça paste de todo o texto neste website
https://markup.rocks/
. No canto superior esquerdo, selecione Org.