Hardware wallet provider Tangem has announced a security incident involving an external helpdesk system. According to the company, unauthorized individuals gained access to this platform on October 8th and 9th, 2026. The names and email addresses of a limited number of customers may have been compromised. Tangem emphasizes that wallets, the app, private keys, and other services were not affected.<\/p>\n\n\n\n
In a customer notification dated October 10, 2026, Tangem describes unauthorized access to a third-party-operated system for processing support requests. Customer names and email addresses may have been affected. According to Tangem, no other personal data was involved in this incident.<\/p>\n\n\n\n
Tangem stated that it has secured its systems, is continuing to investigate the incident, and is working with the software provider on a complete resolution. The statement does not specify how many people were affected or how the unauthorized access was technically achieved.<\/p>\n\n\n\n
According to Tangem, neither hardware wallets nor the app, private keys, or other services were compromised. Therefore, the reported access to the support system alone does not imply access to customer wallets or cryptocurrencies. Names and email addresses alone do not technically grant access to a wallet's private keys.<\/p>\n\n\n\n
Nevertheless, a significant risk remains: criminals could use the disclosed contact information to send personalized messages. Such attacks often aim to trick users into revealing their recovery phrase (seed phrase), private keys, or other sensitive information. The potential phishing threat is clearly distinct from an actual compromise of the wallet.<\/p>\n\n\n\n
A supposed Tangem support representative might, citing the data breach, announce an urgent "security check," direct users to a fake website, send a QR code, or request the installation of additional software. Even a correctly used customer name and a convincing Tangem logo are not proof of authenticity. These are conceivable fraud scenarios, not evidence that corresponding attacks have already occurred as a result of this specific incident.<\/p>\n\n\n\n
Tangem explicitly states that the company never requests the disclosure of seed phrases or private keys, does not send links for wallet verification, recovery or backup, and does not request the installation of any software.<\/p>\n\n\n\n
Anyone who has received a suspicious message should not reply, open any attachments, or disclose any information. If passwords or codes have been entered on an unfamiliar website, the affected accounts should be secured immediately using the official security services.<\/p>\n\n\n\n
If software was installed at your request, the affected device should no longer be used for wallet access and should be professionally inspected. If a seed phrase or private key has been exposed, the assets controlled by it may be immediately at risk. Any remaining assets should be transferred immediately \u2013 if safely possible \u2013 to an independently and securely set up wallet with new keys. If you are unsure, seek professional help immediately.<\/p>\n\n\n\n
Evidence such as suspicious emails, including full headers, URLs, screenshots, and transaction IDs, should be secured. If cryptocurrencies have already been transferred, filing a timely criminal complaint and conducting blockchain forensic analysis can be helpful for further investigation.<\/p>\n\n\n\n
This incident highlights a frequently underestimated risk in the crypto space: A compromised support system doesn't necessarily have to affect the wallet technology itself, but it can create the basis for credible identity and support fraud. Especially with non-custodial wallets, keeping private keys and recovery information confidential is crucial.<\/p>\n\n\n\n
We recommend independently verifying any allegedly urgent wallet backup request through official channels. Anyone who has lost cryptocurrencies as a result of a fake support message should back up communication and transaction data as soon as possible to allow for forensic analysis.<\/p>","protected":false},"excerpt":{"rendered":"
Tangem reports a data breach at its external support. The article explains which data might be affected, whether wallets are secure, and how users can avoid phishing.<\/p>","protected":false},"author":4,"featured_media":239306,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-239304","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-allgemein"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t