Trezor breach grows to 81,000 customers after ShipMonk kept old data
Trezor has revised the scope of its August data breach, now saying 81,000 customers were affected instead of the roughly 14,000 first reported. The increase stems from logistics partner ShipMonk failing to delete older records as its contract required, exposing details of 67,000 additional U.S. customers who ordered between November 2019 and August 2021.
GoKawiil's interpretation of the reporting above, not reported fact.
The incident shows how third-party vendors can undermine a company's data-retention promises long after a business relationship or order has ended. For Trezor's customers, exposed names, addresses and phone numbers create lasting phishing and physical-security risks even though the wallets and core crypto systems remain uncompromised.
- Total affected customers rose from about 14,000 to 81,000.
- ShipMonk retained old customer data despite written deletion confirmations to Trezor.
- Trezor warns affected users to watch for phishing attempts using leaked contact details.
Trezor Safe 5 Hardware Wallet — If the news has you thinking about how your crypto keys are stored, the Trezor Safe 5 keeps private keys offline on a dedicated device with a color touchscreen and PIN protection. It supports a wide range of coins through Trezor Suite, so you can move funds off exchanges and hold them yourself. A shipping-vendor leak of contact data is a good reminder to lock down the assets themselves.
See Trezor Safe 5 Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-07
Published there as: “Trezor data breach impact now reaches 81,000 customers”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.