- Trezor says a breach involving shipping provider ShipMonk potentially affected 13,689 customers across several countries.
- Around 11,742 customers had information including names, emails, phone numbers and shipping addresses exposed.
- Trezor says its own systems and hardware wallets remain secure, but affected users could face more sophisticated phishing attempts.
Trezor has disclosed a significant customer data breach involving third-party shipping provider ShipMonk, potentially exposing sensitive order information belonging to thousands of hardware wallet buyers.
According to Trezor, ShipMonk notified the company on August 10 that an unauthorized party had accessed customer information. Approximately 13,689 customers worldwide who received orders within the 90 days before August 8, 2026, were potentially affected.
Of those customers, around 11,742 reportedly had their full names, email addresses, phone numbers and shipping addresses exposed. Customers in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal were among those affected.
Trezor Hardware Wallets Remain Secure
Trezor emphasized that the breach occurred at its shipping provider rather than within Trezor’s own infrastructure.
The company’s systems and hardware wallets were not compromised, meaning the incident does not appear to have directly exposed private keys or wallet backups.
However, leaking contact information and physical addresses creates another risk. Attackers could potentially use those details to construct convincing phishing messages targeting known cryptocurrency holders.
Trezor warned customers never to enter their wallet backup into a website or share it with another person, regardless of how legitimate a message appears.
90-Day Policy Limited the Data Exposure
The impact of the breach was reduced by Trezor’s customer data retention policy.
The company requires fulfillment partners to delete or anonymize order-related information after 90 days. As a result, information belonging to customers who purchased devices outside the affected period was no longer stored within ShipMonk’s systems.
The incident is particularly notable because Trezor says it marks the first breach since the company’s 2013 founding to expose customer phone numbers and shipping addresses.
Trezor Investigates With ShipMonk
Trezor is now working with ShipMonk to determine how the unauthorized access occurred and exactly what customer information was compromised.
ShipMonk has reportedly secured the affected systems and introduced additional security measures following the incident.
For Trezor customers, the biggest immediate concern is phishing rather than the security of the hardware wallet itself. With attackers potentially possessing names, emails, phone numbers and addresses, users should be particularly cautious of unexpected communications claiming to come from Trezor.
