The data breach occurred after unauthorized access to ShipMonk's systems, Trezor's shipping and logistics partner, exposed customer order information. Specifically, 11,742 customers had full exposure of name, email, phone number, and shipping address, while 1,947 customers had partial exposure (name, city, email). Trezor confirmed that its internal systems and hardware wallets remain secure and unaffected. The breach is limited to customer data handled by the third-party logistics provider. Trezor advises affected customers to be cautious of phishing attempts leveraging the leaked personal information. This incident follows a previous breach in January 2024 involving Trezor's support ticketing portal.

The breach exposed personally identifiable information (PII) of nearly 14,000 customers, including full names, shipping addresses, email addresses, and phone numbers for most affected individuals. This data exposure increases the risk of targeted phishing attacks, social engineering, and impersonation scams against these customers. However, Trezor's hardware wallets and internal systems were not compromised, so the security of cryptocurrency assets stored on Trezor devices remains intact. The breach does not impact Trezor's operational services but poses a privacy risk to affected customers.

Trezor has confirmed that its systems and devices are secure and were not compromised. Customers affected by the breach should remain vigilant against phishing attempts and avoid responding to unsolicited requests for personal information or recovery seeds. There is no indication that Trezor devices need to be replaced or that users must change wallet credentials. Monitoring communications for suspicious activity and verifying the authenticity of messages purportedly from Trezor or financial institutions is recommended. No direct patch or fix is applicable since the breach occurred via a third-party logistics provider.