Trezor Warns 67,000 U.S. Customers As Data Breach Discovery Expands

A hardware wallet maker is notifying tens of thousands of additional customers about an expanded data breach stemming from its former shipping partner.

The company says ShipMonk notified it on September 2 that order records from November 2019 through August 2021 remained in its systems and were swept up in the same incident first reported in August.

The newly exposed data includes full names, email addresses, phone numbers, shipping addresses, and order numbers for about 67,000 US customers.

Trezor expressed disappointment that ShipMonk did not delete the records despite repeated written assurances tied to contracts and the company’s 90-day retention policy.

Trezor says that it had received repeated written assurances from ShipMonk over the years confirming that customer data from their earlier partnership had been deleted.

“Throughout our entire relationship with ShipMonk, we repeatedly requested and received written assurance confirming the deletion of the data, in line with our contract, data policy, and past communications. We are very disappointed that, despite receiving this confirmation, the data was not deleted in their systems.”

… Continue reading the full article at the original source below.