Trezor Data Breach Grows Sixfold After Hidden Shipping Logs Found

Crypto hardware wallet manufacturer Trezor just shared a major update regarding a recent data breach at its logistics partner, ShipMonk. The company says that another 67,000 customers in the United States had their personal information exposed, bringing the total number of affected users to over 80,000.

The newly discovered records cover purchases made between November 2019 and August 2021. The exposed details include names, email addresses, phone numbers, and physical shipping addresses. Trezor explained that these old records survived in the vendor systems despite written assurances that they had been permanently deleted according to standard 90 day retention policies.

Fortunately, the incident did not compromise Trezor wallet systems, recovery seeds, or private funds. The core security of the hardware devices remains fully intact. However, the real danger comes from the physical and digital trail left behind, as scammers could use real home addresses and phone numbers to target crypto holders with phishing attempts or physical threats.

Trezor has already emailed everyone newly affected by the incident and urged users to stay vigilant. Moving forward, traders and hardware wallet owners should watch out for targeted scam emails and phone calls, and remember never to share secret recovery phrases on any website.