Trezor Data Breach Expands As Shipping Partner Retains Records

Hardware wallet maker Trezor revealed a major security setback on Friday, stating that a breach at its shipping partner ShipMonk exposed the personal data of approximately 67,000 more users. Trezor explained that these records remained in the shipping company systems despite prior written confirmation that the data had been permanently deleted. The newly affected orders took place between November 2019 and August 2021.

The leaked information includes full names, home shipping addresses, phone numbers, email addresses, and order numbers. This new total comes on top of an earlier disclosure in August that impacted over 13,000 customers, pushing total potential exposures above 80,000 records. Trezor noted this is the first time in its history that customer shipping addresses and phone numbers have leaked in a security incident.

Trezor stressed that its own internal systems and physical wallet devices remain fully secure, meaning private keys and seed phrases were not compromised. However, the company warned that users face serious risks from phishing scams, fraudulent calls, and potential physical threats due to exposed home addresses. Affected users should stay extremely cautious and never share their wallet recovery seed phrases with anyone.