Key facts
- Trezor's fulfillment partner, ShipMonk, suffered unauthorized access to its systems.
- The breach exposed personal data of nearly 14,000 Trezor customers.
- Exposed data includes names, email addresses, phone numbers, and shipping addresses.
- Trezor has notified affected customers and warned of increased phishing risks.
- Trezor's internal systems and crypto wallet devices remain secure.
- Orders fulfilled through Amazon are unaffected.
Trezor, a manufacturer of hardware cryptocurrency wallets, has alerted nearly 14,000 customers to a data breach that occurred at its shipping partner, ShipMonk. The unauthorized access to ShipMonk's systems exposed sensitive customer information, including names, email addresses, phone numbers, and shipping addresses. Trezor emphasized that its own infrastructure and crypto wallet devices remain secure and unaffected by the incident. The company has notified all affected customers via email and is warning them of potential phishing risks, such as scams impersonating banks, exchanges, or Trezor itself. This marks the first time in Trezor's 13-year history that customer phone numbers and shipping addresses have been compromised. The incident follows previous data breaches affecting Trezor's support portal and customers in 2024 and 2022, as well as similar breaches at rival Ledger. Global data breaches are reportedly at an all-time high, with a significant increase in weekly attacks.