Trezor data breach: shipping provider hacked, exposing personal details of thousands of customers
Source Reddit Cybersecurity
Discussion
A data breach occurred at ShipMonk, a shipping provider for Trezor, exposing personal details of approximately 13,689 customers who placed orders between May and August 2026. Exposed data includes full names, email addresses, phone numbers, and shipping addresses. Trezor's own systems and hardware wallets were not compromised. The breach increases the risk of phishing attacks targeting affected customers. Trezor has notified impacted individuals and is working with ShipMonk to investigate and secure systems. Customers are advised to be vigilant against phishing and not to share wallet backups or sensitive information.
r/cybersecurity (opens in a new tab)u/Fabulous-War52390 points0 comments
one of Trezor's shipping providers, ShipMonk, has suffered a data breach affecting sensitive data of buyers from the US, UK, Sweden, Colombia, Brazil, Italy, and Portugal
As per Trezor's own announcement, thousands of customers were affected from orders placed between May and August 2026. most had their name, email, phone number, and home address exposed
it makes it much worse when it's from a hardware wallet company. If you're a whale, a bad actor now knows your name, email, phone number, and home address, which can be used for phishing, or worse
Trezor says its own systems and wallets were not compromised, but is warning customers to be extra cautious of phishing attempts
source: https://trezor.io/blog/news/recent-customer-data-exposed-in-shipping-provider-incident