Trezor says 13,689 customers hit by data breach at shipping partner
Crypto hardware wallet Trezor revealed today that the personal details of 13,689 of its customers have been leaked.
The breach at Trezor’s mailing partner, ShipMonk, impacted users across the UK, US, Sweden, Colombia, Brazil, Italy, and Portugal, who ordered a Trezor product between May 10 and August 8, 2026.
Nearly 12,000 customers had their full name, physical address, phone number, and email address leaked, while almost 2,000 saw their name, city, and email address leaked.
Trezor says private keys are safe
Trezor claims someone gained “unauthorized access” to ShipMonk’s systems, and that Trezor infrastructure, such as its devices and private keys, is unaffected.
It warned that leaked users are now at risk of phishing scams via phone, email, or post, and stressed that “Nobody from Trezor ever asks for a wallet backup.”
