Hardware wallet maker Trezor stated that its third-party email provider was compromised, allowing phishing emails to be sent from its official domain. Trezor warned users about an email titled 'Critical Security Alert: STM32 Entropy Vulnerability,' confirming it is a phishing attempt and advising against clicking any links. The company has since taken down the affected domain and is investigating the incident. Separately, Swiss bitcoin hardware wallet maker BitBox reported a similar phishing email circulating under its disguise on the same day. This incident follows a security breach last month at Trezor's shipping provider, ShipMonk, which exposed personal information of approximately 80,700 Trezor customers.