Trezor says shipping partner breach exposed data of nearly 14,000 buyers

Hardware wallet maker Trezor said a breach at its shipping provider ShipMonk exposed personal data of nearly 14,000 customers who ordered devices between May and early August. About 11,700 had full details exposed, including name, email, phone number, and shipping address, while roughly 1,900 had partial data taken. Trezor stressed that its own systems were not compromised and its devices remain secure, but warned customers to expect phishing. Exposed home addresses tied to cryptocurrency ownership carry an added risk, as physical attacks on crypto holders have risen this year. The company said it is introducing an anonymous delivery option in response.

Check

Affected Trezor customers should be alert to phishing and impersonation using their real order details, never enter a wallet recovery phrase in response to any message, and be mindful of address exposure.

Affected

Nearly 14,000 Trezor customers whose names, emails, phone numbers, and shipping addresses were exposed through the ShipMonk breach; the data enables convincing phishing and, tying addresses to crypto ownership, physical risk.

Fix

Treat unexpected wallet-related messages as suspicious, keep recovery phrases entirely offline, and for organizations, hold shipping and fulfillment vendors to the same data-protection and breach-notification standards as internal systems.