Trezor Provider ShipMonk Breach Exposed Order Data for 13,689 Hardware Wallet Customers

Trezor disclosed today that a data breach at ShipMonk, the logistics partner that stores its products and ships orders to customers, exposed order data belonging to 13,689 buyers across seven countries. The breach hit 11,742 customers whose names, email addresses, phone numbers, and shipping addresses were all exposed, plus 1,947 whose names, cities, and email addresses were taken. Order numbers were included. Trezor said the records came from orders received between May 10 and August 8, 2026, and named the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal as the affected markets. “Our systems were not compromised, and your Trezor device is secure,” the company stated, adding that hardware wallets, private keys, and wallet backups were not affected. A 90-day data storage policy, which Trezor said it negotiated into its fulfillment partners’ terms as well, kept older orders out of the exposed set, but every affected customer was contacted individually by email. Phishing Warning Follows Address Leak Trezor told customers to treat any communication that demands immediate action or requests personal information as “suspicious,” to check claims against officia...