Trezor Data Breach Grows to 80,000 Victims After Vendor Failed to Delete Data
Trezor’s data breach just got a lot bigger. The hardware wallet maker confirmed on September 4 that roughly 67,000 additional U.S. customers were caught up in a security incident tied to its shipping provider, ShipMonk, pushing the total number of affected users far beyond what the company first disclosed weeks earlier. The revised figure turns what looked like a contained mishap into one of the more serious third-party data exposures the crypto hardware industry has seen this year.
Key takeaways
- Trezor said another approximately 67,000 U.S. customers were affected by the ShipMonk data breach, on top of the roughly 14,000 initially reported in August.
- Exposed records cover orders placed between November 2019 and August 2021 and include names, emails, phone numbers, shipping addresses, and order numbers.
- Trezor said it repeatedly asked ShipMonk to delete the data and received written confirmation that it had been removed — but the data was never actually deleted.
- Trezor’s own systems and hardware wallets were not compromised, according to the company.
- All newly affected customers have been emailed and warned about scam risks and physical security concerns.
Expanded ShipMonk Data Breach Hits Over 67,000 Trezor Customers in the U.S.
The scope of the Trezor data breach expanded dramatically after ShipMonk told the company on September 2 that the incident was far bigger than first reported. Trezor initially disclosed the breach on August 13, saying about 14,000 customers had personal information exposed. That number has now jumped by another 67,000 U.S. customers, according to Trezor’s own statement and reporting from Cointelegraph and TheStreet.
… Continue reading the full article at the original source below.
