My email is everywhere so shouldn’t be hard to find on some random list in the clearnet. 

But sometimes if you’re email got leak by a random company once, it is easy for phishers to buy the info in the darkweb 

I’ve my email since the dawn of time so it has been leak a bunch. 

As far as yours goes… good question. Try https://haveibeenpwned.com and see if it got leaked. If it did I’m assure you has been compromised forever 

 Mine has been leaked 7 times, one of those from Xitter 🤦🏻‍♂️🤣 https://i.nostr.build/6o8v.jpg  

 Sure, all of us so many times, but how did they make it look like it was from Trezor, how did they spoof noreply@trezor.io?

Just read their blog, seems someone got access to their support portal, but could they send emails form it?!?
Weird..

I ordered a Trezor years ago and never used it or the support portal 🤷‍♂️