Trezor User Data Leaked in Shipping Partner Security Breach

Hardware wallet provider Trezor announced that 13,689 customers had their personal information leaked after a breach at its mailing partner, ShipMonk. The incident affected users across several countries including the United States, the United Kingdom, and Brazil who placed orders between May and August 2026. Data exposed ranges from physical addresses and phone numbers to email addresses.

Trezor confirmed that its own infrastructure remains secure. The company emphasized that private keys and physical hardware wallets were not impacted by the breach. While the company maintains a policy of deleting or anonymizing order data 90 days after delivery, the timing of this event still leaves thousands of users vulnerable to potential attacks.

The firm is currently evaluating its partnership with ShipMonk as it gathers more information. In the meantime, Trezor warned customers to stay alert for phishing attempts. Scammers often use leaked contact information to send fake emails or letters posing as wallet companies to trick users into revealing recovery phrases. Always remember that Trezor will never ask for your wallet backup or recovery seed.

This incident highlights the ongoing risks for crypto users when third parties handle sensitive purchase data. Similar leaks at other wallet providers have previously led to targeted phishing campaigns and physical security threats. If you received a warning email from the company, monitor your communication channels closely and ignore any suspicious requests for information.