In 2020, the plaintiff purchased a Trezor hardware wallet on which they stored cryptocurrencies (Bitcoin and Ethereum). In addition to the hardware wallet, the plaintiff also used the Trezor Suite software provided by the defendant to carry out transactions. In March 2022, MailChimp, the US company used by the defendant to manage its newsletters, fell victim to a cyberattack. During this attack, the plaintiff's email and IP addresses were also stolen.<\/p>\n
A few days later, the plaintiff received a phishing email pretending that a security update was required for his wallet. Trusting the sender and the supposed urgency, the plaintiff followed the instructions in the email and entered his recovery seed after downloading fake software. Shortly thereafter, the plaintiff's crypto assets worth over 96,000 euros were transferred away by the unknown perpetrators.<\/p>\n
The regional court found that Trezor Company is partially liable for the damage incurred, in particular because the plaintiff was not sufficiently informed that his personal data was transmitted to MailChimp, a US service provider. The court ruled that the defendant must pay half of the claimed amount to the plaintiff, but dismissed the rest of the claim. The court assumed contributory negligence on the part of the plaintiff, as he should have recognized the risks and the importance of the recovery seed.<\/p>\n
This case illustrates the ongoing risks faced by cryptocurrency owners and the importance of privacy and data security. Despite a global decline in the total amount of stolen crypto assets to $1.7 billion in 2023, cyberattacks on crypto platforms and their users remain a significant problem. Particularly concerning is the increase in attacks where private keys are compromised.<\/p>\n