started · updated
Trezor customer data exposed in ShipMonk shipping breach
Trezor, a hardware wallet manufacturer, has reported a data breach involving its third-party shipping partner, ShipMonk. An unauthorized actor gained access to ShipMonk's systems, exposing the personal information of approximately 13,689 customers who received orders between May 10 and August 8, 2026.
Of the affected individuals, 11,742 had their full names, physical addresses, phone numbers, and email addresses leaked. An additional 1,947 customers experienced partial exposure, including their names, cities, and email addresses. The breach impacted users across seven countries: the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal.
Trezor confirmed that its own internal infrastructure, hardware devices, private keys, and wallet backups remain secure and were not compromised. The company noted that the scope of the leak was limited by its 90-day data retention policy.
Due to the exposure of contact and shipping details, Trezor warned customers of an increased risk of highly targeted phishing attacks via email, phone, or physical mail. To mitigate future risks, Trezor is developing an anonymous delivery option, which it aims to launch in the EU by September 2026 and in the US by the end of the year.
Entities
ShipMonk · Sweden · Trezor · United Kingdom · United States
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 22 SOURCES] The breach affected customers in the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal. bitnewsbot.com · www.tronweekly.com · airdropalert.com · criptoinforme.com · www.crypto-insiders.nl · +14 more
- [● 5 SOURCES] Trezor plans to launch an Anonymous Delivery option in the EU by September 2026 and the US by year-end. crypto.news · www.nadanews.com · bitnewsbot.com · www.territoriobitcoin.com · bitcoinethereumnews.com
- [● 23 SOURCES] Trezor's internal systems, hardware wallets, and private keys were not compromised. bitnewsbot.com · thecryptocurrencypost.net · www.tronweekly.com · airdropalert.com · criptoinforme.com · +15 more
- [● 18 SOURCES] An unauthorized actor gained access to the systems of shipping partner ShipMonk. bitnewsbot.com · thecryptocurrencypost.net · www.tronweekly.com · airdropalert.com · criptoinforme.com · +9 more
- [● 21 SOURCES] 1,947 customers had partial exposure including names, cities, and email addresses. bitnewsbot.com · www.tronweekly.com · airdropalert.com · criptoinforme.com · www.crypto-insiders.nl · +13 more
- [● 22 SOURCES] A total of 13,689 customers had their personal data exposed. bitnewsbot.com · www.tronweekly.com · airdropalert.com · criptoinforme.com · www.crypto-insiders.nl · +14 more
- [● 6 SOURCES] The breach was limited by a 90-day data retention policy. bitnewsbot.com · airdropalert.com · crypto.news · cryptoticker.io · coinpaper.com
- [● 22 SOURCES] 11,742 customers had their full names, addresses, phone numbers, and email addresses exposed. bitnewsbot.com · www.tronweekly.com · airdropalert.com · criptoinforme.com · www.crypto-insiders.nl · +14 more
- [● 17 SOURCES] 11,742 customers had their full names, physical addresses, phone numbers, and email addresses exposed. bitnewsbot.com · www.tronweekly.com · airdropalert.com · criptoinforme.com · www.crypto-insiders.nl · +8 more
- [● 23 SOURCES] An unauthorized actor gained access to the systems of Trezor's shipping partner, ShipMonk. bitnewsbot.com · thecryptocurrencypost.net · www.tronweekly.com · airdropalert.com · criptoinforme.com · +15 more
- [● 2 SOURCES] Trezor is developing an Anonymous Delivery option to be launched in the EU by September 2026 and the US by year-end. crypto.news · www.nadanews.com
- [● 17 SOURCES] A total of 13,689 customers were affected by the data breach. bitnewsbot.com · www.tronweekly.com · airdropalert.com · criptoinforme.com · www.crypto-insiders.nl · +8 more