A data breach may have occurred as early as April and no later than early May, according to on-chain detective Specter, who said the timing can be inferred from the period covered by the stolen data. Specter said the parties involved remained silent until recently, roughly when Trezor disclosed its own data breach. During that period, some users had already been targeted by phishing (fraudulent messages meant to steal credentials or funds) and suffered asset losses. Specter alleged the parties did not act transparently, failed to warn users or issue risk alerts, and instead denied that a breach had occurred.