Trezor, a manufacturer of hardware cryptocurrency wallets, has disclosed a data breach impacting nearly 14,000 customers. The incident stemmed from unauthorized access to the systems of ShipMonk, Trezor's shipping and logistics partner.
The breach, which Trezor confirmed on Thursday, August 13, 2026, exposed customer order data. This included full names, shipping addresses, email addresses, and phone numbers for 11,742 customers. An additional 1,947 customers had partial exposure, limited to their name, city, and email address.
Customers affected by the breach are located in the United States, the United Kingdom, Sweden, Colombia, Brazil, Italy, and Portugal. The compromised data pertains to orders placed and received between May 10 and August 8, 2026.
Trezor clarified that its own systems were not compromised and that the security of its hardware wallets remains unaffected. The company emphasized that the breach did not impact its operations or services.
However, Trezor warned affected customers to be vigilant against potential phishing attempts. The stolen information could be leveraged by scammers to send fraudulent emails, make fake phone calls, or send deceptive letters, potentially impersonating banks, cryptocurrency exchanges, or even Trezor itself. These sophisticated phishing attempts could aim to trick users into revealing sensitive personal information or their 24-word recovery seeds.
This is not the first data breach disclosed by Trezor. In January 2024, the company reported an incident involving its third-party support ticketing portal. That breach exposed names, usernames, and email addresses of approximately 66,000 users who had interacted with Trezor Support since December 2021. Following that incident, Trezor confirmed that the stolen information was used in phishing attacks designed to trick recipients into divulging their recovery seeds.
