v1 → v2
Scores
trust_score45 → 12
severity_base— → —
score_modifier0 → -10
Sections
The Brevo Platform Breach → Incident Overview
unchanged
Discrepancy in Reported Scope of the Breach → Technical Attack Vector: SAML SSO Boundary Failure
unchanged
The Phishing Campaign: Fake 'STM32 Entropy Vulnerability' → The Phishing Campaign: Fabricated STM32 Entropy Vulnerability
unchanged
Trezor's Response and Mitigation → Secondary Attack: Brevo Supply Chain Compromise (September 14, 2026)
unchanged
Pattern of Repeated Third-Party Vendor Breaches → Prior Incident: ShipMonk Breach (August 2026)
unchanged
Broader Risk Implications for Hardware Wallet Users → Broader Impact: Other Affected Vendors
unchanged
(section 7) → Trezor's Response and User Guidance
unchanged
(section 8) → Third-Party Vendor Risk Pattern
unchanged
Timeline events
+ added2022-04-01 — (no description)
+ added2026-09-10 — (no description)
+ added2026-09-11 — (no description)
+ added2026-09-12 — (no description)
+ added2026-09-13 — (no description)
+ added2026-09-14 — (no description)
+ added2026-09-15 — (no description)
- removed2026-09-02 — (no description)
- removed2026-09 — (no description)
~ changed2026-08-10: “” → “”
~ changed2026-08-13: “” → “”
~ changed2026-09-09: “” → “”
~ changed2026-09-17: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v1 hash: e7984b0f41d483741ae97b9a451a4dca2c820ec84593733c5751cc01399b345f
v2 hash: 246a255bfdbd29271a223aee72b1fcd975b0fe2bb025ce43b429b82e93b59261