Trezor Provider ShipMonk Breach Exposed Order Data for 13,689 Hardware Wallet Customers

The breach hit 11,742 customers whose names, email addresses, phone numbers, and shipping addresses were all exposed, plus 1,947 whose names, cities, and email addresses were taken.

Order numbers were included. Trezor said the records came from orders received between May 10 and August 8, 2026, and named the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal as the affected markets.

“Our systems were not compromised, and your Trezor device is secure,” the company stated, adding that hardware wallets, private keys, and wallet backups were not affected.

A 90-day data storage policy, which Trezor said it negotiated into its fulfillment partners’ terms as well, kept older orders out of the exposed set, but every affected customer was contacted individually by email.

Phishing Warning Follows Address Leak

Trezor told customers to treat any communication that demands immediate action or requests personal information as “suspicious,” to check claims against official channels, and to never enter a wallet backup on a website or share it with anyone.

… Continue reading the full article at the original source below.