Trezor data breach expands to over 80,000 customers

The scale of a data breach involving hardware wallet manufacturer Trezor has expanded significantly, with the total number of affected users rising to over 80,000. This follows a previous disclosure in August that initially identified approximately 14,000 affected customers.

The breach originated from Trezor’s shipping provider, ShipMonk. Trezor reported that an additional 67,000 U.S. customers were impacted after it was discovered that ShipMonk failed to delete historical order data as requested. Although Trezor had received written confirmation that the data had been removed, records from orders placed between November 2019 and August 2021 remained in the vendor's system.

Exposed information includes names, email addresses, phone numbers, shipping addresses, and order numbers. Trezor stated that its own internal systems and hardware wallets were not compromised by the incident. The company has notified affected customers and warned them to remain vigilant against phishing attempts, scams, and potential physical security risks.